Say a ransomware encrypts your database but hides the fact (by secretly decrypting everything you ask for). Then your backups become rubbish once the attacker deletes the key.
What are good measures against that?
I wonder if you e.g. should put a backup on a separate disk/tape and analyse it on a computer not connected to your network. By "analyse" I mean run a set of standard tests that show that the data is readable.