A backup you have not tested is not a backup. Schedule monthly restores into a staging environment — automate the verification.
For Postgres, pg_dump for logical backups, base-backup + WAL archives for point-in-time recovery. Cloud providers usually offer both; check your RPO and RTO.
Store backups off-site. The simplest test: pick a random row in production, restore yesterday’s backup to staging, find the row.