Some important things I'd like to mention about backups...
I have been dismayed (but somehow not surprised) to hear that a lot of people and companies get hit by ransomware, then go to implement their backups and find they don't work because either;
- the backups are also encrypted
- they did not backup correctly
- or they cannot be restored.
For backup solutions to be effective they need to be:
- Isolated from the host system. Literally unplugged when not being used is the most effective way. Another way is to use extension-less encrypted archives.
- Verified on each backup. The system regularly needs to be checked either manually or automatically to verify that backups are being stored correctly.
- Tested. Some software and solutions don't play well with some systems. Restore systems need to be tested and working. The first time one runs the restore routine should not be in an emergency situation.
These things may seem simple but large companies and home users alike have overlooked them and it has cost them dearly.