The 3-2-1-1-0 Rule and Beyond: Building the Backup Foundation for Cyber Resilience