3-2-1 backup

A 3-2-1 backup design for OT servers: a primary online copy, a second local offline tape copy and a third offsite encrypted immutable copy, with OT-initiated backup sessions through a gateway, restore testing on isolated spare hardware from copy 2 or 3, and a separate approved procedure for production restoration.