diff --git a/backup-inside-outside.dot b/backup-inside-outside.dot
new file mode 100644
index 0000000..d176bfb
--- /dev/null
+++ b/backup-inside-outside.dot
@@ -0,0 +1,27 @@
+digraph G {
+    node [ shape=box ]
+
+
+
+    subgraph cluster_backup_to {
+        server [ label="Server" color="#40a9e3", style="filled"]
+        backupdevice [ label="Backup\nUSB, NAS, etc..." ]
+        attacker1 [ label="Attacker" ]
+
+        label="Backing up FROM the server"
+
+    }
+
+    server->backupdevice [ label="Backs up TO" ]
+    attacker1->{server,backupdevice} [ label="Can access/encrypt everything" ]
+
+    subgraph cluster_backup_from {
+        backupserver [ label="Backupserver\nNAS, Service @ ungleich, ..." ]
+        server2 [ label="Server" color="#40a9e3", style="filled"]
+        attacker2 [ label="Attacker" ]
+        label="Backing up from ANOTHER server"
+    }
+
+    attacker2->server2 [ label="Can only encrypt the server" ]
+    backupserver->server2 [ label="Backs up FROM" ]
+}