It is a mandatory part of business continuity measures, including recovery testing

Backups must not be encrypted to speed up recovery

It is only a recommended measure for critical data

Backups should be stored on the same server as the original data

Backups only need to be done once a year