{"id":31739,"date":"2026-10-07T11:53:31","date_gmt":"2026-10-07T09:53:31","guid":{"rendered":"https:\/\/mu.wedoback.com\/?page_id=31739"},"modified":"2026-10-07T12:22:44","modified_gmt":"2026-10-07T10:22:44","slug":"why-offsite-backup","status":"publish","type":"page","link":"https:\/\/mu.wedoback.com\/en\/guides\/backup\/why-offsite-backup\/","title":{"rendered":"Why keep an off-site backup?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"31739\" class=\"elementor elementor-31739 elementor-31552\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ef6bc14 e-con-full wdb-g e-flex e-con e-parent\" data-id=\"ef6bc14\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-7cee42f e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"7cee42f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-aa183e7 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"aa183e7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b48d7fa elementor-widget elementor-widget-text-editor\" data-id=\"b48d7fa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1128dab elementor-widget elementor-widget-heading\" data-id=\"1128dab\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Why keep an off-site backup?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-95ec887 elementor-widget elementor-widget-text-editor\" data-id=\"95ec887\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">An off-site backup exists so that an event that destroys the production site, physically or logically, still leaves a copy elsewhere. Without it, the backup protects against a disk failure, but neither against the loss of the building nor against an attacker already inside the network.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ea3b93 elementor-widget elementor-widget-text-editor\" data-id=\"0ea3b93\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>5<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cf0881f e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"cf0881f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-2a687f2 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"2a687f2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-0f96f04 e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"0f96f04\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-160a247 elementor-widget elementor-widget-text-editor\" data-id=\"160a247\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Off-site covers <strong>fire<\/strong>, <strong>flooding<\/strong>, <strong>theft<\/strong> and some <strong>attacks<\/strong> on the local network.<\/li><li>It only protects against ransomware if compromised accounts <strong>cannot delete it<\/strong>: offline or immutable.<\/li><li>Choose a distance that avoids the <strong>same disaster<\/strong> as the main site.<\/li><li>It replaces neither monitoring, nor a sufficient history, nor a DRP to restart the service.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4db2e02 elementor-widget elementor-widget-text-editor\" data-id=\"4db2e02\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The scenarios an off-site backup covers<\/h2><p><strong>Physical disaster.<\/strong> Fire, flooding, structural collapse, theft with removal of the machines. Everything in the same premises is lost at once, including the \u201cemergency\u201d external disks in the drawer. CERT-MU, the Mauritian national computer emergency response team, recommends in its backup guideline keeping at least one copy off site: storing backups in the same place as the original data is a mistake to avoid.<\/p><p><strong>Narrow regional disaster.<\/strong> A copy at the neighbour across the landing or on the same electrical transformer can go down with you. The useful distance depends on the risk: a few kilometres are enough for a fire in the premises, not for a flood across an area. The NIST contingency planning guide asks you to consider the likelihood that the storage location is affected by the same disaster as the main site.<\/p><p><strong>Attack on the network.<\/strong> Modern ransomware looks for backups. It uses privileged accounts, mounted shares and consoles left open. Mandiant observed in 2025 that ransomware groups now target backup infrastructure and delete backups stored in the cloud, to make restoration impossible. An off-site copy only protects you if these accounts cannot delete it. Otherwise, \u201coff-site\u201d simply means \u201canother IP address, same credentials\u201d.<\/p><p><strong>Local operating error.<\/strong> A format, a replaced storage array, a clean-up script with too wide a scope. The remote copy, especially if it is immutable for a period, gives you time to notice.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc3617d elementor-widget elementor-widget-text-editor\" data-id=\"fc3617d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The scenarios an off-site backup does not cover on its own<\/h2><ul><li>A backup that has been failing for three weeks without anyone reading the reports.<\/li><li>A lost decryption key.<\/li><li>A history that is too short: last night&#8217;s off-site copy is already encrypted, and there is no version from a month ago. See <a href=\"\/en\/guides\/backup\/how-long-to-keep-backups\/\">How long should you keep backups?<\/a>.<\/li><li>The need to keep working within the hour. The off-site copy lets you restore. It does not switch on a replacement server. Resuming the service is the job of the <a href=\"\/en\/guides\/drp-bcp\/what-is-a-drp\/\">DRP<\/a> or BCP.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a87998a elementor-widget elementor-widget-text-editor\" data-id=\"a87998a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Off-site and offline<\/h2><p>Two different properties:<\/p><ul><li><strong>Off-site<\/strong>: another location.<\/li><li><strong>Offline or immutable<\/strong>: the copy cannot be continuously modified from the production network. The ANSSI, France&#8217;s national cybersecurity agency, defines an offline backup as a backup on a medium disconnected from any information system.<\/li><\/ul><table><thead><tr><th><\/th><th>On site, online<\/th><th>Off site, online<\/th><th>Off site, immutable<\/th><th>Offline<\/th><\/tr><\/thead><tbody><tr><td>Fire in the premises<\/td><td>Lost<\/td><td>Protected<\/td><td>Protected<\/td><td>Protected if stored elsewhere<\/td><\/tr><tr><td>Stolen administrator account<\/td><td>Exposed<\/td><td>Exposed if same credentials<\/td><td>Protected until expiry<\/td><td>Protected<\/td><\/tr><tr><td>Restoration speed<\/td><td>Very high<\/td><td>High<\/td><td>High<\/td><td>Slower<\/td><\/tr><\/tbody><\/table><p>A cloud copy reachable with the domain administrator&#8217;s password is off site and online. It is already a major improvement against fire. Against ransomware, it must also refuse deletion for a period, or require an identity the attacker does not have. The ANSSI recommends an offline copy, or at least an online off-site copy under certain conditions; for an online copy, it considers a WORM solution acceptable, the offline copy remaining the most robust.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-371759e elementor-widget elementor-widget-text-editor\" data-id=\"371759e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>Copies are kept outside the production network, on servers dedicated to backup, replicated across several separate sites. The client can require a region imposed by law. The <a href=\"\/en\/immutable-offer\/\">IMMUTABLE<\/a> offer prevents modification and deletion for the chosen period, up to ten years, which addresses the case where backup credentials are stolen. Encryption takes place on the machine before the data leaves, with a key held by the client. To restart servers on standby instances from a copy, see the <a href=\"\/en\/drp-offer\/\">DRP<\/a> offer.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/immutable-offer\/\">Discover the IMMUTABLE offer<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7eab7f4 elementor-widget elementor-widget-text-editor\" data-id=\"7eab7f4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Does my software vendor&#8217;s cloud count as an off-site backup?<\/summary><p>Only if it keeps a history, under credentials separate from yours, and you can restore an earlier version from it. A sync service or a file-sharing space, even hosted elsewhere, replicates deletions and encryption: it is off-site, but it is not a backup.<\/p><\/details><details><summary>Are off-site and offline the same thing?<\/summary><p>No. Off-site means another location; offline means a medium disconnected from any information system. The ANSSI, France&#8217;s national cybersecurity agency, recommends at least one offline copy or, failing that, an online off-site copy protected against deletion, for example by WORM storage.<\/p><\/details><details><summary>Do attackers really target backups?<\/summary><p>Yes. Mandiant&#8217;s M-Trends 2026 report describes ransomware groups that target backup infrastructure, delete backup objects in cloud storage and attack the directory and virtualisation layers, to prevent any restoration and force payment.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-861e40d elementor-widget elementor-widget-text-editor\" data-id=\"861e40d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/should-you-outsource-backups\/\"><small>IT backup<\/small>Should you outsource your backups?<\/a><a href=\"\/en\/guides\/backup\/protect-backups-from-ransomware\/\"><small>IT backup<\/small>How to protect your backups from ransomware<\/a><a href=\"\/en\/guides\/backup\/where-to-store-backups\/\"><small>IT backup<\/small>Where should you store your backups?<\/a><a href=\"\/en\/guides\/backup\/what-is-an-immutable-backup\/\"><small>IT backup<\/small>What is an immutable backup?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d7b3632 elementor-widget elementor-widget-text-editor\" data-id=\"d7b3632\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Information system backup \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI, France&#8217;s national cybersecurity agency<\/li><li><a href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-34r1.pdf\" target=\"_blank\" rel=\"noopener\">SP 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems<\/a> \u2014 NIST<\/li><li><a href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/m-trends-2026\/\" target=\"_blank\" rel=\"noopener\">M-Trends 2026: Data, Insights, and Strategies From the Frontlines<\/a> \u2014 Mandiant (Google Cloud)<\/li><li><a href=\"https:\/\/cert-mu.govmu.org\/cert-mu\/wp-content\/uploads\/2023\/10\/Guideline-on-devising-a-personal-backup-plan.pdf\" target=\"_blank\" rel=\"noopener\">Guideline on devising a personal backup plan (CMSGu2017-03)<\/a> \u2014 CERT-MU<\/li><li><a href=\"https:\/\/www.wedoback.com\/offre-immuable\/\" target=\"_blank\" rel=\"noopener\">IMMUTABLE offer: WORM storage and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5e962aa e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"5e962aa\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aa898bc elementor-widget elementor-widget-text-editor\" data-id=\"aa898bc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-be77570 elementor-widget elementor-widget-text-editor\" data-id=\"be77570\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-6f06730 e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"6f06730\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-45f8204 e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"45f8204\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-849238a elementor-widget elementor-widget-text-editor\" data-id=\"849238a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":31721,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Off-site backup: why and how to do it | WeDoBack","_seopress_titles_desc":"An off-site backup survives fire, flooding and an attack that encrypts everything reachable on the local network.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/4\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/4\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-31739","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31739","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=31739"}],"version-history":[{"count":1,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31739\/revisions"}],"predecessor-version":[{"id":31820,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31739\/revisions\/31820"}],"up":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31721"}],"wp:attachment":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=31739"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}