Data backup and disaster recovery: the 3-2-1 rule, tested restores

Three copies, two media, one off site. We test the restore. RTO and RPO are agreed with you.