A successful backup log is not yet a recovery strategy. What matters is whether you know which data is required, where it is stored and how long recovery takes during a real incident.
RPO and RTO
Recovery Point Objective defines how much data loss is acceptable. Recovery Time Objective defines how long a system may remain unavailable. These two values determine sensible backup intervals and recovery procedures.
Independent copies
Backups should not exist only on the same system or under the same administrative context. A compromised account or storage failure should not automatically affect production and backup at the same time.
Test restore
Regular recovery tests should include not only files but also databases, configurations, secrets and dependencies. The recovery process should be reassessed after major system changes.