Context: With my team I created an "online platform" for a client which moved their operation from a paper based system to a content management system (CMS) based submission system on a Virturl Private Server (VPS).
A large group of users submit content to the CMS in the form of uploading PDF files. These are critical to the operation of the business.
As far as I see it, the online platform should be seen as a tool for data collection and the PDF files should be exported to a separate system as soon as they are uploaded. The business should depend on the exported files and not on the files in the CMS. I would assume the public facing CMS system to be always at risk of data loss through hacking, even cloud account cancellation caused by not paying the bill etc. We have set up backup of the site directory which would backup the data every 12 hours.
Question: Is it good practise to depend solely on the CMS or in this situation is it essential to always have a redundant backup of mission critical data on a separate system? Even if that is an email with the file attached.
And is it right to assume that data in the CMS is always at risk and therefor operations should not be based solely on the VPS?