Just read a similar asked question and thought I would ask what everybody else uses on a corporate side.
For my company we have a procedure which is also planted in our ISO 9002 accreditation.
We use ShadowProtect on two levels.
5 Disks in which 4 are kept off site and 1 is plugged in and backup is done to it. Rotate daily.
Also Daily a cloud backup is done too ShadowProtect.
Monthly a backup is also done to a remote computer in a different part of our site which is not part of the offices.
I know it may sound convoluted but for us it works.