DR/BCP is harder now than it was with cloud storage and SaaS making it more difficult, but not impossible. Every business-critical system and service, includin

DR/BCP is harder now than it was with cloud storage and SaaS making it more difficult, but not impossible. Every business-critical system and service, including every user account used, first needs to be inventoried and then inventoried on an ongoing basis. With that, data can be roughly sized and classified with a business impact analysis - "How much money do we lose if X?". From that, backup jobs/agents, retention schedules, and other forms of mitigation investments can be made. PS: It's heartening to see CommVault is still in business. EDIT: I once bought a FireKing smaller 3-hour data safe and implemented a barcoded LTO GFS policy using Iron Mountain as the offsite vaulting vendor. Sadly, FK no longer make safes for tape media anymore. It looks like IBM/HPE/Quantum LTO-9 tapes and drives are about the only games in town, and around $80 for 18 TB making them half the gross cost of circular spinning rust. Amazon's Glacier uses low-speed circular spinning rust like Facebook does for colder storage.