Protecting your data
A copy of your data stored separately. Protects against accidental deletion, hardware failure, and minor disruptions. Recovers data to a previous state.
Protecting your operations
A full plan to reinstate systems and operations after a major disruption. Covers ransomware, natural disasters, and catastrophic failures. Keeps the business running.
What is the Difference Between Backup and Disaster Recovery?
In today's digital environment, data loss is not a theoretical risk — it is a question of when, not if. Whether due to a cyberattack, hardware failure, or natural disaster, the consequences of being unprepared are often severe and sometimes irreversible.
Backup and disaster recovery are frequently discussed together, and sometimes used interchangeably. They are not the same thing. Understanding the distinction — and why both matter — is fundamental to building a resilient organisation.
What is a Backup?
A backup is a copy of your data stored separately from the original. Its purpose is retrieval — if data is lost, corrupted, accidentally deleted, or overwritten, a backup allows you to restore it to a previous state. Backups are typically performed regularly, creating a series of restore points across time.
Backups protect against the most common causes of data loss: hardware malfunctions, user error, software corruption, and ransomware encryption. They are the foundation of any data protection strategy.
Types of Backup
Full backup
A complete copy of all data at a point in time. Comprehensive but time and storage intensive. Typically run weekly or monthly.
Incremental backup
Copies only data changed since the last backup. Fast and storage-efficient. Requires all increments to restore — more complex recovery.
Differential backup
Copies all data changed since the last full backup. A middle ground — faster recovery than incremental, less storage than full.
Cloud backup
Data stored off-site in a cloud environment. Accessible from anywhere with internet access. Protects against on-site disasters.
Looking for the right backup solution for your organisation? Fortuna Data has been supplying enterprise backup software to UK businesses since 1994.
Explore backup solutions →What is Disaster Recovery?
Disaster recovery goes significantly beyond data restoration. It is a comprehensive strategy for reinstating entire systems, applications, and operations after a major disruption — whether that disruption is a ransomware attack, a fire, a flood, a power failure, or a critical infrastructure collapse.
Where backup asks "can we get the data back?", disaster recovery asks "can we get the business back?" The distinction matters enormously. An organisation can have perfect backups and still face weeks of downtime if it has no plan for restoring the systems, configurations, and workflows that the data feeds into.
Key Components of a Disaster Recovery Plan
Recovery Time Objective (RTO)The maximum acceptable time your systems can be offline. If your RTO is four hours, your DR plan must restore operations within that window.
Recovery Point Objective (RPO)The maximum acceptable amount of data loss, measured in time. An RPO of one hour means backups must run at least hourly.
Failover proceduresDocumented steps for switching to backup systems when primary systems fail. Must be tested regularly, not just written down.
Communication planWho contacts whom, when, and how during an incident. Staff, clients, regulators, and insurers all have different notification requirements.
Regular testingA DR plan that has never been tested is a plan that will fail when needed. Recovery procedures must be validated at least annually.
Not sure if your current backup and disaster recovery strategy would survive a ransomware attack? We can assess your current position and identify the gaps.
Talk to a specialist →Why You Need Both — Not Just One
Backup and disaster recovery are complementary, not interchangeable. Backup without a disaster recovery plan means you have the data but no structured way to restore business operations. Disaster recovery without adequate backup means your DR plan has nothing reliable to recover from.
Together, they form a comprehensive safety net. Backup ensures the integrity and availability of your data. Disaster recovery ensures that when an incident occurs — and it will — your organisation has a clear, tested path back to normal operations.
The 3-2-1-1 Rule for UK Businesses
The 3-2-1-1 rule is the industry-standard framework for backup strategy and is particularly relevant for UK businesses with GDPR obligations:
3 copies of data
The original plus two backup copies. If one fails, you have two others to fall back on.
2 different media types
For example, on-premise disk and cloud, or disk and tape. Different media fail in different ways.
1 copy off-site
Protects against site-level disasters — fire, flood, or physical theft of on-premise hardware.
1 copy immutable
A backup that cannot be modified or deleted, even by ransomware. The last line of defence against encryption attacks.
Backup and Disaster Recovery for UK Businesses
Under UK GDPR, organisations have obligations around the availability and resilience of data processing systems, and the ability to restore access to personal data in a timely manner after an incident. A documented, tested backup and disaster recovery strategy is not just good practice — it is a compliance requirement.
Fortuna Data has been providing backup and disaster recovery solutions to UK businesses since 1994. We supply and support a range of backup software, immutable storage, and Office 365 backup solutions — and we can help you build a strategy that is right-sized for your organisation, your data volumes, and your risk profile.
Ready to review your backup and disaster recovery strategy? Speak to one of our specialists — no obligation, just a straight conversation about where your risks actually sit.
Backup software configurator