Agreed. I would add that both the local and DR backups should be verified tamper-proof. All too often I have seen people go through all the trouble of setting

Agreed. I would add that both the local and DR backups should be verified tamper-proof. All too often I have seen people go through all the trouble of setting up and testing DR sites, only to have the same automation able to tamper with local and DR copies of the customer data. If the automation can delete or write to a backup, so can the attackers.