I personally prefer the the "traditional rule of thumb" backup method. It as simple as 1, 2, and 3.

Having at least 1 remote backup.

Then ensuring it at least backed up 2 different ways.

Then having a total of 3 or more backups.

Assuming the clients take their backups then this would be following this to perfection. With a number of quality providers.