Keep a recoverable copy
Back up both the database and website files. Confirm your retention policy and where copies are stored.
Test restoration
Use a staging environment to check that a backup restores correctly before relying on it.
Before updating
Keep a fresh independent copy before major changes, and document how to recover access.