Keep 3 copies of your data, on 2 different media, with 1 stored off-site. Automate them and test restores: a backup you have never restored is only a hope.
What to check
- Include files, databases and configuration needed to restore.
- Keep an off-site or immutable copy with separate access.
- Test restores and agree acceptable data loss and recovery time.