Achieving resilience: data loss and recovery in three countries

Recovery from adverse incidents, such as accidents or cyber attacks, is a cornerstone of cyber resilience. Backups are essential in facilitating information and systems recovery. We have limited understanding of how individuals make and use backups, and of how data loss and recovery occur, including which factors might be helpful to afford resilience. To gain insights, we surveyed almost representative (in age and gender) samples of German, UK and USA populations, 1423 in total. Almost half of the participants (656, 46\%) experienced at least one data loss incident. Whereas 42\% of 656 recovered using backups, 24\% had outdated or incomplete backups. High levels of stress were reported, especially by those recovering without backups. In the full sample, 86\% of participants created full or partial backups of at least one of their devices, the most important trigger being prior data loss experiences.