After a couple of hairy moments lately we are putting together a best practice 'data security procedures' to safeguard data on our networks.

What do you use as data and network solutions i.e. student / staff data, server data? What kind of backup rotas? How far back do you have backups? Should I be able to retrieve data from 6 months ago?

Thoughts please?