What should be the frequency and retention period of the electronic data backup ?
Has to be determined by you and should be risk-based.
Frequency is more of a business-based decision - what’s the pain threshold for data loss?
Retention is more of a regulatory-based decision - you may need to consider applicable regulatory requirements for record retention for making decisions about backup retention.