There is little doubt that backups and recovery are vital parts of a healthy web hosting experience. But are backups and recovery part of security? If you do not have good backups, is the security of your website, server or VPS at risk? Many experts would argue, yes, it is.
Much of hosting security centers around protecting a web server from intrusion, either through websites themselves or through other protocols. There is also a mitigation side that details what you should do if your server actually does suffer an attack. Mitigation might involve the clearing away of malware, repair of damaged file systems, the blocking of malicious users or even the recovery of backed up files.
Certain types of attacks can effect your data systems, either by corrupting the data itself or by damaging the physical hardware. Either way, backups become essential when your data is compromised in any way.
You can take the following steps to ensure your backups are themselves secure:
- Rely on off-site backups when possible
- Make sure users, passwords, etc. are all unique to the backup server and not the same as server being backed up
- Perform routine backups of mission critical data
- Test recovery procedures to ensure that your backups are usable and working correctly.
- Strengthen and encrypt network connections and transactions to ensure that remote backups are not exploited
Backup and recovery is indeed a vital part of overall system security. A security breach could put your data at risk, and you never know when you might need your backed of files to fix the problem.