Data Protection & Resilience
One of our seven practice areas — every brief we’ve published in this coverage area, newest first.
-
SaaS Backup Explained: Episode Brief
The written companion to the Enterprise Techie episode on SaaS backup: what Microsoft, Google and Salesforce actually promise, what the 2024 UniSuper incident showed, and the native retention windows that run out.
-
Ransomware Recovery Explained: Episode Brief
The written companion to the Enterprise Techie episode on ransomware recovery: the Jaguar Land Rover and Maersk cases, five layers of a recovery architecture, dated figures from Sophos and Veeam, and five questions to take to your team.
-
RTO vs RPO: Definitions, MTD, Examples and How to Set Them
The difference between RTO and RPO, defined from NIST SP 800-34 and AWS and Microsoft guidance, plus how MTD and work recovery time fit, how to set targets through a business impact analysis and how each maps to backup, replication and standby choices.
-
Ransomware Recovery Plan: A Runbook Built on CISA and NIST
A phase-by-phase ransomware recovery runbook built on CISA, NIST, NCSC and FBI guidance, from offline backups and first-hour isolation to identity-first rebuilds, clean-environment validation and what OFAC says about paying.
-
Backup Restore Testing: How Often, What to Test, Checklist
A practical guide to backup restore testing: why a successful backup job proves little, the six types of restore test, what NIST, CISA, DORA and NYDFS require, what to measure and how to document results for auditors.
-
Disaster Recovery Plan Template: A NIST-Based IT Outline
A copyable IT disaster recovery plan template built on NIST SP 800-34 Rev. 1, NIST CSF 2.0, CISA and Ready.gov guidance, from the business impact analysis and call tree to per-system RTO and RPO, dependencies, recovery procedures, testing and sign-off.
-
Proxmox Backup Server: 2026 Evaluation and Planning Guide
An evaluation and planning guide to Proxmox Backup Server 4.2, built from Proxmox’s own documentation: architecture, PBS deduplication, off-site sync, S3 and tape, protection features, sizing, 3-2-1 placement and per-server subscription pricing.
-
Veeam Alternatives 2026: Evaluating Veeam Competitors
An evaluation guide to Veeam alternatives as of October 2026: what Veeam covers today, how Commvault, Cohesity, Rubrik, Arcserve, NAKIVO, Druva, HYCU and Proxmox Backup Server document workloads, immutability, recovery, licensing and control planes, and how to keep old Veeam backups during a switch.
-
Air Gapped Backup: Physical vs Logical vs Immutable
A vendor-neutral explainer on air gapped backup: the NIST definition, physical vs logical air gaps, how immutability and cyber recovery vaults differ, and how to choose by threat scenario.
-
Ransomware Tabletop Exercise: Plan, Run and Sample Scenario
A ransomware tabletop exercise guide built on CISA’s Tabletop Exercise Packages, NIST SP 800-84, FEMA’s HSEEP and the NCSC’s Exercise in a Box, with a fictional five-inject scenario, discussion questions, an after-action process and what CPG 2.0, DORA and NYDFS say about frequency.