With cyber threats rising and compliance standards tightening, organisations face growing pressure to revisit their data protection strategies. The era of treating backups as a box-ticking exercise is over.
Backups only matter if you can recover fast and reliably. Resilience today must include both backup and recovery. Whether you are a bank, retailer or healthcare provider, you must assume that one day your systems will fail. Your backup strategy will determine whether that failure becomes a disaster.
Modern backup demands a shift in mindset and strategy to ensure continuity in the face of inevitable disruptions.
The 3-2-1 backup rule still applies, but it is no longer enough
The long-standing backup best practice, maintaining three copies of data, on two different media, with one stored offsite (the “3-2-1 rule”), still applies. However, implementing it has become more difficult.
In an era of cloud-native workloads and SaaS sprawl, complexity continues to grow. South African organisations are no longer just protecting data in on-prem data centres.
Today, organisations have workloads in hybrid clouds, multiple SaaS environments and a growing use of AI workloads that did not exist five years ago. Your backup strategy needs to reflect that reality. These modern backup demands require flexible, cloud-aware and AI-integrated solutions.
A changing threat landscape requires modern backup strategies
Threats are no longer limited to accidental deletion or server failure. Cyberattacks have fundamentally changed the role of backup.
Criminals are going after your backup infrastructure first because they know it is your last line of defence. Attacks now target not just virtual machines, but entire SaaS environments and even supply chains. Therefore, organisations cannot rely on SaaS vendors alone to protect their data. The responsibility lies with the business.
To stay resilient, organisations should:
- Automate backups across cloud, SaaS and on-prem workloads.
- Keep backups isolated from production environments.
- Use immutable, off-site storage that cannot be tampered with.
- Regularly test recovery processes through drills, not assumptions.
AI workloads add a new layer of risk
As South African organisations begin integrating Artificial Intelligence (AI) into daily operations, they face a new challenge: how to protect the infrastructure powering those systems.
AI is not just a buzzword anymore. Vector databases and machine learning models are now business-critical assets. Yet, many are deployed quickly and without proper resilience planning. As a result, organisations may improve their services through AI but fail to protect the infrastructure supporting it.
AI is also transforming how backups are managed. Automation and AI are helping IT teams scale their backup posture without adding complexity. At the same time, however, organisations need to safeguard AI systems themselves. That includes their data pipelines, configurations and compute environments. Meeting modern backup demands now includes protecting the very AI systems shaping enterprise performance.
Compliance is closing in
Both leaders emphasise the growing influence of regulation on backup and recovery strategies. In the EU, the Digital Operational Resilience Act (DORA) is setting new standards for financial entities.
In South Africa, the Financial Sector Conduct Authority’s Joint Standard on Cybersecurity and Cyber Resilience shows a similar shift. Regulators now demand mandatory resilience testing. This has become a compliance issue. If your backups are not tested, and if your recovery timelines are not clearly defined, you may not be compliant under emerging cybersecurity regulations.
A mindset shift is needed
The message is clear. Backup is not a support function. Instead, it is a strategic pillar of business continuity, brand trust and operational survival. Backups are your final line of defence. But they can also be your first line of resilience if you build them right.
We continue to work together. They bring advanced, scalable and tamper-proof backup and recovery capabilities to South African enterprises. These businesses are navigating increasingly complex IT landscapes where modern backup demands must be met with precision and foresight.
 |
 |
| Muggie van Staden | Managing Director | Obsidian Systems | mail me | | Simon Taylor | Founder | CEO | HYCU | mail me | |
