Scope
The global backup covers several data families and requires stronger controls.
Encryption
Secrets and keys must never be published in the Wiki or public logs.
Storage
Keep the backup in a protected location with limited access.
Testing
Regularly verify that the backup can be read and that the restoration procedure works in a controlled environment.