- Home
- Guides on backup, recovery and proof
Guides on backup, recovery and proof
Practical guides for anyone who has to organise backups and prove they work: the 3-2-1 rule, NIS2, ransomware and immutable storage, testing restores, Microsoft 365, zero knowledge.
Written for business owners, IT managers and IT partners in Belgium and Europe. No product brochures: every guide first explains the problem, then the approach, and only then what Zekura does about it. Prefer learning by playing? RestoreRush is our free browser game about the same subject, and in GhostNet you play a Halloween tower defence against cyber threats.
Guide
The 3-2-1 backup rule, explained for 2026
Three copies, two kinds of media, one offsite. Where the rule comes from, why it still holds, what 3-2-1-1-0 adds and how to really apply it in a small or medium-sized business.
Guide
NIS2 and backup: what the law expects from your backups
Article 21 of NIS2 asks for backup management, business continuity and tested recovery. What that means in practice for a Belgian or European company, how CyFun translates it and which evidence an auditor wants to see.
Guide
Ransomware and backup: why immutable storage makes the difference
Modern ransomware deletes your backups first. How that happens, what object lock in compliance mode does, why the permissions of your backup software matter, and how to recognise an attack in your own backup data.
Guide
How do you test a restore? RTO and RPO in practice
A backup that has never been restored is a hope. What RTO and RPO mean, the four levels at which you can test recovery, how often, and how to record the results so they count as evidence.
Guide
Backing up Microsoft 365: why Microsoft does not do it for you
The shared responsibility model, what the recycle bin and retention policies do and do not do, the risks that occur most often, and what a real backup of Exchange, OneDrive and SharePoint must meet.
Guide
Zero-knowledge backup: who holds the key to your data?
Encrypted storage is not the same as encrypted from the vendor. What zero knowledge means, the difference between managed and sovereign keys, how Shamir shares work and why an untested key is not a key.