Choose where backups are written and how they are encrypted, set how long each backup type is kept, run integrity-checked test restores, and execute approved restores with a rollback safety net.
