Offline Backup
Backup media that is not continuously connected to the system, providing protection against online threats.
Also known as: Disconnected Backup, Cold Backup Storage
Category: Concepts
Tags: backup, security, data-protection, resilience
Explanation
Offline backup refers to backup media or systems that are not continuously connected to production systems or networks. Unlike always-online cloud backups or network-attached storage, offline backups are periodically connected for backup operations and then disconnected, reducing the window of vulnerability to cyberattacks.
**Offline vs. air-gapped backups**:
While often used interchangeably, there's a subtle distinction: offline backups may be connected periodically (even automatically) for backup operations, while air-gapped backups are completely isolated with no automated connection capability. Offline backups provide substantial protection with greater convenience.
**Common offline backup methods**:
- **External drives**: USB or Thunderbolt drives connected only during backup windows
- **Tape systems**: LTO tape drives with removable cartridges
- **Removable disk systems**: Hot-swappable drive bays with rotating media
- **NAS with disconnect**: Network storage that can be isolated from the network
**Benefits of offline backups**:
- **Ransomware protection**: Disconnected media cannot be encrypted by malware
- **Reduced attack surface**: Less exposure time to network-based threats
- **Physical portability**: Can be transported to secure off-site locations
- **Cost-effective**: Often less expensive than maintaining hot standby systems
**Implementation considerations**:
- **Backup scheduling**: Plan connection times to capture critical data
- **Automation balance**: Some automation possible while maintaining offline status
- **Physical security**: Protect offline media from theft or damage
- **Media management**: Track and rotate multiple backup sets
- **Testing**: Regularly verify restoration capabilities
**Best practices**:
- Maintain at least one truly offline copy as part of 3-2-1 strategy
- Use encryption on offline media in case of physical theft
- Document procedures for connecting and disconnecting backup media
- Store offline backups in geographically separate locations
- Consider environmental factors for media longevity (temperature, humidity)
Offline backups balance security with practicality, offering strong protection against modern cyber threats while remaining manageable for most organizations.
Related Concepts
← Back to all concepts