Having a backup is not enough. Having an actual backup is better but still not enough. Having a tested recovery procedure is not trivial but usually is enough. I have not yet experienced the case when even that fails and I hope I never will.