Electronic data backup

What should be the frequency and retention period of the electronic data backup ?

Has to be determined by you and should be risk-based.

Frequency is more of a business-based decision - what’s the pain threshold for data loss?

Retention is more of a regulatory-based decision - you may need to consider applicable regulatory requirements for record retention for making decisions about backup retention.