The first step is to determine the
worth
of your data/application. The value of the "paranoia" implementation
should not exceed that, or even come close; If your solution is more
expensive than the thing you're protecting, you know there is a problem.
Come back when you know the worth. As well as your
SLA requirements (very important)
For example, this very web site really doesn't carry business or
financial value, so we really cannot justify a tape-backup and offsite
storage (which is typically cheap solution actually). The server itself is the source control repository server, but
us developers have cached copies on our own harddisks. The database is
backed up every day + logs every 6 hours, onto the same disk, but they
are physically mirrored. Once in awhile we'd FTP the backup copy
elsewhere "offsite" but that's just about it.
The melody of logic will always play out the truth. ~ Narumi Ayumu, Spiral