An apparatus and method for protecting and recovering system data stored in a computer hard disk from corruption that may occur due to malicious or accidental operation during use of a computer are provided. The apparatus manages non-preemptively changed system data in a system area.