An apparatus and method for protecting and recovering system data stored in a computer hard disk from corruption that may occur due to malicious or accidental operation during use of a computer are provided. According to the apparatus and method, not an entire system area but a part needing protection in the system area is selectively protected in a buffer area by using a system area information table and a mapping table, thereby remarkably reducing the size of the necessary buffer area.