If someone stoles the data then the corp can't be trusted. Punishment: erase ALL records from ALL of their databases and forbid that corp to take data for at least one year. The time would depend on the severity of the leak. If the leak if catastrophic, 10 years minimum.
I'm not an expert but I'd mix a RAID with a backup. And the RAID could be a 10 or a 01, but better read about all the types and choose the one that better suits your need.
So they changed the M from music to manure?