How are backups managed?

The backup plan defines what to save, frequency, retention, where copies are stored, encryption, and responsibility. Copies must be kept separate from the primary system when the risk calls for it and, above all, must be restorable: a backup that's never been tested isn't a complete strategy.