For almost every small business you will land on a cloud backup solution.

These do not come without risk. You need to document in your system security plan how you mitigate these risks

Encryption, MFA, and Least Privileged