A scheduled backup is not resilience. A backup that has never been restored is an untested assumption. Resilience requires knowing exactly what is recoverable, how, by whom, and in what time.
Three things convert backup into resilience: an inventory of what must be recoverable; tested restore of critical systems (not just files); and documented, current restore procedures that a trained person can follow under pressure.
Backup also must be protected from the same failure it protects against — including ransomware and account compromise.