“We have backups” is only the beginning
A useful policy answers practical questions: what is copied, how often, where copies are kept, how long they remain available and who can restore them. Without those answers, the word backup can create more confidence than the process deserves.
Frequency should follow how quickly data changes
A mostly static company site may tolerate a longer interval than a busy shop receiving orders all day. The right schedule is connected to how much recent data the business could reasonably afford to lose.
Restoration is the final test
Backups should be separate enough to remain useful when the main system has a problem, and restoration should be understood before an emergency. The goal is not to collect files; it is to recover a working service when it matters.