Disks and backups.
WHAT THE CURRENT FILE SYSTEM PROVIDES
Snapshots Space shared between volumes in a container Encryption built in Cloning of files without duplicating data
WHAT A SNAPSHOT IS
A point-in-time record of the volume, occupying little space until things change.
WHY IT MATTERS
It allows returning to a previous state, and underpins backup.
WHAT THE BACKUP SYSTEM PROVIDES
Automatic incremental backups to an external disk or network location, with historical versions.
WHAT IT DOES NOT PROVIDE
Protection against a disaster affecting the location where the disk is kept.
WHAT TO ADD
A second copy, held elsewhere.
WHAT TO VERIFY
That backups are actually running, and that a restore works.
WHY
An untested backup is an assumption.
WHAT FULL DISK ENCRYPTION PROVIDES
Protection of data if the machine is lost or stolen.
WHAT TO ENABLE
It, on every portable machine, without exception.
WHAT TO RECORD
The recovery key, stored securely and separately.
WHY
Without it, an encrypted disk is unrecoverable.
WHAT TO CHECK BEFORE DISPOSAL
That the disk was erased, not merely emptied.
