Most practices should back up critical data continuously or at least daily, with the exact frequency driven by how much data you could afford to lose. The other half of the answer is testing: a backup you have never restored from is a guess, not a safeguard. Backups should also include the configurations and access details needed for a clean restore.