@technobabble said:
RTO and RPO are points I bring up constantly, of course I call it business continuity/disaster planning, which we have none.
I have AM and PM daily backups, which overwrite every few days, using fBackup program.
300%
Until the RPO and RTO can be determined, it's impossible to determine the level of redundancy and backup needed, as well if high availability should come into play. The next step should be to find these things out.