An hour once a year.
THE ARRANGEMENT
Is the frequency still right for how the site has changed Is retention long enough to cover a slowly discovered problem
Is everything covered: files, database, email, configuration
Is storage still adequate and accessible
THE RECOVERY SIDE
Have you restore-tested in the last year Is your recovery documentation accurate Could someone other than you restore How long would a full recovery actually take
THE WIDER PICTURE
What would the business lose from a day offline What would it lose from losing a week of data Does the current arrangement match those answers
WHAT CHANGES
Sites grow. Data becomes more valuable. Staff change. Storage accounts expire.
An arrangement that was right two years ago may not be now.
WHAT TO UPDATE
Frequency and retention, if the answers changed Documentation, to match reality Who has access to backups and storage
THE QUESTION TO ANSWER HONESTLY
If the hosting account disappeared this afternoon, what would you still have, and how long until you were running again?