Back up both your website files and your database (if your site uses one).
Daily backups are a solid baseline for most business sites.
Keep at least one off-site backup so you can restore even if the server is compromised.
Test a restore periodically?”backups only help if they actually restore cleanly.