Everything in one place.
THE ARRANGEMENT
Backups run automatically on a schedule They include files and database They include email, or email is archived separately They are stored off the server Retention covers at least a year with monthly copies Failure notifications go somewhere you read
VERIFICATION
- Weekly: confirm a recent backup exists
- Monthly: check sizes, retention and coverage
- Quarterly: restore-test to a staging subdomain
- Annually: review the whole arrangement
MANUAL BACKUPS
Before every update Before any migration Before granting developer access Before any significant change
DOCUMENTATION
Where backups are stored and how to access them How to restore, step by step What is not covered by backups Who is responsible
OUTSIDE THE BACKUP
DNS records Domain registration details Third-party credentials Cron jobs
THE TWO THAT MATTER MOST
Off-server storage, and a restore you have actually tested.
Everything else is refinement. Those two are the difference between having backups and being protected.
