3-2-1 rule explained for client proposals

Published Mar 1, 2024 • Updated May 1, 2026

Overview

The 3-2-1 rule—three copies of data, on two media types, with one off-site—survives because it is simple for executives to remember.

How to present it

  • Translate to their workloads: ERP, files, M365, VMs.
  • Show what you actually deliver: backup product, immutability, DR site, tested restores.

Pitfalls

Cloud-only “two copies in one vendor” may violate insurance; clarify vendor architecture honestly.

Proposal snippet

“We maintain production data, local appliance cache, and immutable off-site copy with quarterly restore tests recorded.”

Upsell tie-in

DR runbooks and tabletop exercises as separate line items when risk warrants.

Related Articles

EDR deployment checklist for new workstations

## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...

security-endpoint-protection msp +1

Handling Defender for Business false positives

## Overview False positives waste analyst time and train users to ignore alerts. This article stand...

security-endpoint-protection msp +1

Application allowlisting with Windows Defender ASR rules

## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...

security-endpoint-protection msp +1