Skip to content

Snapshots and Backups: A Nearly Perfect Duo

Snapshots and backups are both crucial for data protection. However, to maximize their benefits, it’s essential to understand their capabilities.

As data volumes and value continue to grow, data has become an invaluable asset for businesses, governments, consumers, and cyber-criminals alike. Cyber-criminals will stop at nothing to steal information or block legitimate users from accessing it. Fortunately, organizations have various tools and methods to protect their data, including backups and snapshots. While these methods share some similarities, they are often mistakenly seen as interchangeable. This article will delve into the fundamental differences between backups and snapshots and how they can complement each other.

The Indispensability of Backups

Until recently, it was common to say that people were either backing up their data or were planning to do so. However, this saying is no longer accurate. It’s increasingly difficult to find individuals or businesses that don’t perform backups. Backups are typically created on a regular schedule (e.g., nightly or multiple times a day) and can include all files on a server, emails, or databases. By archiving data in backups, users are protected against accidental data loss caused by errors, accidental deletions, or other failures. This is why backups are often referred to as “security copies.”

There are several types of backups. The simplest is a full backup, which creates a complete copy of the data to a destination storage device. Other methods include differential and incremental backups. A differential backup only backs up data that has been added or changed since the last full backup. An incremental backup, on the other hand, uses the previous backup as a reference point rather than the initial full backup.

A full backup is a complete copy of the data. If each backup is 10TB, for example, it will consume an additional 10TB of storage. Creating a backup every hour would consume 100TB of storage in just 10 hours. For this reason, storing multiple versions of backups is not a common practice.

The Role of RPO

A challenge with backups is achieving a suitable Recovery Point Objective (RPO), which defines the maximum amount of data loss that can be tolerated and the maximum acceptable time between a failure and the restoration of a system to normal operation. Businesses have varying requirements—some may be satisfied with a 24-hour RPO, while others strive for an RPO as close to zero as possible. For example, losing even a small amount of data in manufacturing companies can lead to production line downtime, lost product batches, and significant financial losses.

Some businesses determine their RPO based on the cost of storage compared to the cost of data recovery. These calculations help determine the frequency of backups. Another approach is to assess risk levels. In this case, a company evaluates which data can be lost without significantly impacting the quality and continuity of its business.

Backups are not optimal for creating short recovery points. Snapshots are much better suited for this purpose, which is why the two technologies should be used together. Snapshots are the preferred solution when high RPO requirements must be met, such as in 24/7 environments like internet service providers.

Snapshots for Specialized Tasks

A snapshot is a point-in-time capture of stored data. Its main advantage is its creation time, which is typically measured in minutes or even seconds. Snapshots are usually created every 30 or 60 minutes and have minimal impact on production processes. They allow for quick recovery to previous file versions at multiple points in time. For example, if a system is infected with a virus, files, folders, or entire volumes can be restored to a state before the attack.

However, snapshots are often a feature of NAS or SAN storage and are stored on that storage. This means they occupy relatively expensive storage capacity, and if the storage fails, users lose access to recent snapshot copies. While individual snapshots do not consume much space, their combined size can increase, leading to additional processing costs during recovery. Therefore, it’s good practice to limit the number of stored copies. Experts recommend not storing snapshots for longer than the last full backup.

Furthermore, migrating a snapshot from one physical location to another does not allow for environment restoration, which is possible with backups. Since a snapshot is not a complete copy of the data, it should not be considered the sole backup and should be combined with backups. In summary, backups provide the ability to restore data over long RPOs, often quickly and in detail, down to the file level.

Types of Snapshots

While snapshot creation processes vary by vendor, there are several common techniques and integration methods.

  • Copy-on-write: This method copies any blocks before they are overwritten with new information.
  • Redirect-on-write: Similar to copy-on-write, but it eliminates the need for a double write operation.
  • Continuous Data Protection (CDP): CDP snapshots are created in real-time, capturing every change.
  • Clone/mirror: This is an identical copy of an entire volume.

Summary

Snapshots and backups have their strengths and weaknesses. Generally, backups are recommended for long-term protection, while snapshots are intended for short-term use and storage. Snapshots are typically useful for restoring the latest version of a server within the same infrastructure.

Both snapshots and file backups can be used together to achieve different levels of data protection, and this is actually the most recommended configuration for backup strategies.

About Storware
Storware is a backup software producer with over 10 years of experience in the backup world. Storware Backup and Recovery is an enterprise-grade, agent-less solution that caters to various data environments. It supports virtual machines, containers, storage providers, Microsoft 365, and applications running on-premises or in the cloud. Thanks to its small footprint, seamless integration into your existing IT infrastructure, storage, or enterprise backup providers is effortless.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Real-world recovery: SaaS data backup as the cornerstone of cyber resilience

In today’s digital landscape, where cloud-based services like Microsoft 365 dominate, cyber resilience has become a top priority for organizations. Businesses are increasingly relying on SaaS (software-as-a service) platforms, assuming that all their data is secure. However, without the right backup strategy, they may find themselves vulnerable in the face of data loss or a cyberattack.

In this post, I want to share a real-world experience from a client that highlights the importance of SaaS data recovery and how it plays a crucial role in maintaining operational continuity.

A crisis unfolds

One of our partner’s clients, who remains anonymous due to confidentiality agreements, faced a daunting cyberattack that compromised their Microsoft Azure AD (Entra ID). Like many businesses, they believed their data was safe in the cloud, under Microsoft’s protection. What they didn’t realize, however, is that Microsoft’s services are not immune to data loss or breaches, and the responsibility for safeguarding data ultimately lies with the customer. This is part of what’s known as the shared responsibility model, where cloud providers handle infrastructure security, but data protection remains the customer’s responsibility. Read Microsoft’s shared responsibility in the cloud (source: Microsoft).

When the attack occurred, the client was caught off-guard. Administrative accounts were compromised, some user accounts were maliciously deleted, and there were attempts to exfiltrate sensitive data from SharePoint. The customer’s crisis committee immediately launched an investigation, but they quickly ran into a roadblock: Azure AD only retains logs for 30 days, making it impossible for them to perform an in-depth forensic analysis of what had transpired.

The flow of recovery

By using Keepit backup and recovery for Microsoft Entra ID (formerly Azure Active Directory), we were able to act quickly in response to the cyberattack in three broad steps:

  • Downloaded the last 12 months sign-in and audit logs of Entra ID for investigative analysis using Keepit’s unlimited storage and retention capability.
  • Traced when and what changes happened on the compromised accounts using Keepit for Entra ID metadata previewer feature.
  • Restored the affected user accounts along with their configurations and permissions without needing to recreate accounts from scratch using Keepit for Entra ID’s powerful recovery features.

The power of backup

This is where Keepit became a game-changer. By leveraging Keepit’s robust backup capabilities, we were able to provide the customer with access to logs that spanned an entire year. This historical data was critical for the investigation, as it allowed the customer to trace the breach back to its origins, determine the extent of the damage, and understand when the attack had taken place.

But data recovery goes beyond simply accessing logs. The compromised user accounts needed to be restored, along with all their associated settings (metadata) — something that would have been a nightmare without the right backup solution. Keepit’s ability to restore not just user accounts but also their configurations, MFA settings, and group memberships ensured the client could recover quickly without having to start from scratch. If the client had relied on a standard backup solution, the process would have taken significantly longer, jeopardizing their recovery time objective (RTO).

The lesson: Backup is non-negotiable

This experience underscores a key lesson: Having a comprehensive SaaS data backup and recovery strategy is essential to cyber resilience. It’s not just about restoring files but about maintaining business continuity, even when the unexpected happens. The ability to quickly recover from a breach can mean the difference between a short disruption and a prolonged, business-threatening downtime.

For companies operating 100% in the cloud, like our client, backing up identity systems (such as Entra ID) is as crucial as backing up files. When administrative accounts are compromised, and there’s no backup, organizations face the risk of losing more than just data — they risk losing control over their entire cloud environment. Read more on why Microsoft Azure AD needs to be backed up in the cloud.

Cyber resilience starts with recovery

The ease and speed with which we were able to restore the client’s operations, thanks to Keepit, reaffirmed the central role that data recovery plays in cyber resilience. It’s not just about preparing for attacks but also about having the right tools in place to recover from them. This customer, through our guidance, has now included Keepit as a key component in their cyber resilience strategy. They understand that backup is no longer a nice-to-have; it’s a critical aspect of their business continuity planning.

In a world where the question isn’t if an attack will happen, but when, the ability to recover swiftly is a vital need. With Keepit, we were able to help our client turn what could have been a catastrophic breach into a manageable incident, all thanks to a well-implemented SaaS data recovery strategy.

 

This article is part one of a two-part series sharing a real-world customer story on cyber resilience. In part two, we look into how cyber insurance played a critical role in protecting a business from the financial impact of a ransomware attack. Read part two entitled “Real-world recovery: The role of cyber insurance in ransomware resilience.”

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

EasyVista Launches EV Pulse AI: Major Enhancements Elevating IT Service Management with Next-Level AI Capabilities

EasyVista, a global SaaS provider for comprehensive IT service management (ITSM), IT monitoring, Enterprise Service Management, and Remote Support, today announced the launch of EV Pulse AI, a transformative AI layer integrated into its flagship EasyVista Platform. These major enhancements to EasyVista’s AI capabilities, part of the Platform 2024.3 release scheduled for November 2024, represent a significant enrichment of EasyVista’s AI capabilities, offering organizations unprecedented power to simplify IT complexities, streamline operations, and accelerate digital transformation.  

Continue reading

Scale Computing Earns 2025 TrustRadius Buyer’s Choice Award From Happy Customers

Scale Computing Platform Recognized by its Customers for Best Capabilities, Best Value for Price, and Best Customer Relationship

INDIANAPOLIS – October 29, 2024 – Scale Computing, the market leader in edge computing, virtualization, and hyperconverged solutions, today announced that TrustRadius has recognized Scale Computing Platform (SC//Platform) with a 2025 Buyer’s Choice Award.

Buyer’s Choice Awards are based entirely on vetted, unbiased customer reviews, and have been selected as having the best capabilities, value for price, and customer relationships.

During the evaluation process, reviewers are asked if products and their support teams live up to expectations, and would they buy the product again. These answers shape whether or not a product is chosen as best in the three key areas: capabilities, value for price, and customer relationship.

“Scale Computing Platform winning the TrustRadius Buyer’s Choice Award is a testament to their ability to simplify IT infrastructure for customers,” said Allyson Havener, SVP of Marketing and Community at TrustRadius. “This award, based entirely on vetted customer reviews, highlights how the platform empowers businesses with efficient, scalable solutions that reduce complexity and drive operational success.”

With a trScore of 9.6 out of 10, Scale Computing is recognized by customers and partners as a leader in hyperconverged infrastucture, virtualization, and edge computing. To learn more about what real users have to say about Scale Computing Platform, please visit the TrustRadius Scale Computing Platform review page.

SC//Platform brings together simplicity and scalability, replacing existing infrastructure and providing high availability for running workloads in a single, easy-to-manage platform. The zero-touch provisioning (ZTP) feature of Scale Computing//Fleet Manager (SC//Fleet Manager) provides cloud-like simplicity for administrators. It enables them to centrally configure clusters of edge computing infrastructure prior to nodes arriving on-premises, decreasing the deployment time of edge infrastructure by 90 percent or more.

Scale Computing Platform has replaced our previous environment which was a mixture of physical servers and a different, more complicated virtual environment. The previous environment was harder to use, and used quite a bit more energy, which once caused a power surge that forcefully powered down everything. Since switching to Scale Computing Platform, the environment is easy to use and manage, we have lower electricity costs, and any issues that have occurred were handled quickly and easily by support. We recently replaced our Scale Computing Platform cluster with a newer version, and the process was seamless.

— Technician in Information Technology at a Transportation/Trucking/Railroad Company

Scale Computing is focused on making the migration to SC//Platform simple for new customers. The company is offering an SC//Migrate Quickstart Service, including expert guidance and support to ensure a smooth and efficient migration process with minimal disruption and seamless integration with SC//HyperCore. In addition, Scale Computing is currently offering customers a promotion where they can transfer existing software licenses and exchange existing hardware through the Seamless Switch: Trade-Up to Scale Computing program.

“We are honored to be named a winner in the inaugural Buyer’s Choice Awards from TrustRadius,” said Jeff Ready, CEO and co-founder of Scale Computing. “We designed Scale Computing Platform with a focus on simplicity and ease of management, and patented self-healing technology that keeps downtime at bay. It cuts complexity, reduces costs, and frees up valuable IT resources. We’re proud to be recognized by TrustRadius as the buyer’s choice for businesses seeking powerful and user-friendly IT solutions, and to create products that inspire such positive feedback from real users. We are grateful for the genuine reviews that serve as a testament to the dedication we have to our customer community.”

About Scale Computing 
Scale Computing is a leader in edge computing, virtualization, and hyperconverged solutions. Scale Computing HC3 software eliminates the need for traditional virtualization software, disaster recovery software, servers, and shared storage, replacing these with a fully integrated, highly available system for running applications. Using patented HyperCore™ technology, the HC3 self-healing platform automatically identifies, mitigates, and corrects infrastructure problems in real-time, enabling applications to achieve maximum uptime. When ease-of-use, high availability, and TCO matter, Scale Computing HC3 is the ideal infrastructure platform. Read what our customers have to say on Gartner Peer Insights, Spiceworks, TechValidate and TrustRadius.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Covered: 4 Things to Look for When Choosing a Cyber Insurance Provider

Why You Need Cyber Insurance

Cyber insurance is no longer a “nice to have” commodity. Every SMB and enterprise must have cyber insurance. Besides the obvious reasons, it can also help remove the burden of a potential liability between a client, vendor, or third-party entity.

Most importantly, it can provide peace of mind in the event of a data breach.

Let’s pause for a moment here. No one likes to talk about data breaches until they have to disclose them publicly, but for many organizations, it’s a reality. If an attacker managed to gain unauthorized access and compromise systems or exfiltrate data, who’s to blame?

Hopefully, not you.

However, without proper cyber insurance coverage, your business might be fully liable for damages if your business data is compromised in any way. A long and painstaking process that can quickly deplete your budget in an instant. In this blog, we’ll highlight the importance of having cyber insurance and what to look for when choosing a provider.

The Financial Impact of Cyber Attacks and Ransomware

A recent survey revealed that 87% of global decision-makers said that their company is currently not adequately protected against cyber attacks. Cyber insurance helps ensure that businesses have a safety net in place to cover the financial repercussions of a security incident. It also helps organizations effectively address breaches, both in terms of financial and reputational damages.

Cyber insurance adds a security blanket to organizational risk management strategies, offering comprehensive coverage that extends beyond the immediate costs of a breach, but also in long-term support for recovery and compliance matters, which can be a very messy area.

Ransomware is a serious and expensive threat that many insurance providers do not cover. Sophos found that ransom payments have surged by 500% YoY to an average of $2M in 2023 alone. With ransomware attacks now taking on the form of AI, organizations will have to up their security and insurance game to avoid paying the hefty costs associated with these incidents.

The more pressing question is: Exactly how much of that $2 million is paid out of pocket?

This leads us to the important topic of what to look for when choosing a cyber insurance provider.

4 Things to Look for When Choosing a Cyber Insurance Provider

Incident Response Support: Every second counts after a breach or cyber incident has occurred. Does the policy include support for business continuity planning and disaster recovery? Does the insurer provide access to an incident response team and a crisis management team to guide you through the process? Check if the insurer offers credit monitoring services to help protect affected individuals from any further losses. Dedicated claim managers can also help streamline the entire process, from initial filing to final settlement. Get to know your team beforehand and make sure everyone is aligned with the direction. And last but not least, if you are covered for ransomware, who pays the ransom and waits for reimbursement? Is it you or the incident response team? Just something to keep in mind.

Claims Handling Process: Is the claim filing process a smooth and easy transition or do you have to wait weeks on end for an email or return call? Is the payout process transparent? Do you know how much your deductible is? What are you paying out of pocket, with one or multiple deductibles? Do your due diligence when it comes to this crucial step, particularly with payouts and response times. Businesses simply don’t have time to wait around and stop operations in the aftermath of a security incident. They need to focus their attention on immediate mitigation efforts. Understand how filing a claim might affect your future premiums or coverage. Some insurers might adjust premiums or terms based on claims history. Take the time to carefully review the fine print and details before submitting any claim.

Exclusions and Limitations: What’s included in the plan? Finding this out before you sign any contract is imperative. Make sure you thoroughly review the policy to understand any exclusions or limitations that could prevent you from signing on. Check for exclusions related to pre-existing vulnerabilities or ransomware payouts. Avoid any unpleasant surprises that can pop up later down the line, particularly in a potential breach lawsuit. You certainly don’t want to have to pay out of pocket for legal fees or regulatory fines that you assumed would be covered. Right?

Policies That Include Ransomware Coverage: According to the 2023 Ransomware Trends Report, 21% of organizations found out that ransomware is specifically excluded from their cyber insurance. Not exactly the type of coverage you should be seeking that will give you a good night’s sleep. However, it is not uncommon for insurance carriers to refuse ransom payouts for several reasons. The attack could have been preempted by the organization’s failure to maintain cybersecurity best practices, such as regularly updating and patching software, conducting routine phishing simulations, and implementing advanced security measures like intrusion detection systems. Don’t expect an insurer to provide you with ransomware coverage if you’re not up-to-date on security protocols and employee training either.

Another reason might be if a business failed to follow the insurer’s recommendations for risk mitigation. You can’t expect your insurance provider to hold up their end of the deal if you haven’t upheld yours.

Guardz Pro Tip: It’s important to check if there are any exclusions or caps on the amount that can be claimed for ransom payments.

And above all, make sure you go with a cyber insurance provider you can trust. One that will be there for you 24/7 in a crisis to help you recover and get business operations going.

Secure Your Digital Assets with Cyber Insurance from Guardz

Don’t wait until you’ve been hit with a breach to get cyber insurance coverage. Guardz enables businesses to secure optimal insurance coverage at the most competitive price. Every business is built differently. Guardz understands that and helps you get premium cyber insurance coverage tailored specifically to your business requirements. Whether you’re an SME or a Fortune 500, you must insure your digital assets to keep your operations running smoothly.

About Guardz
Guardz is on a mission to create a safer digital world by empowering Managed Service Providers (MSPs). Their goal is to proactively secure and insure Small and Medium Enterprises (SMEs) against ever-evolving threats while simultaneously creating new revenue streams, all on one unified platform.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.