Start with a solid backup plan that you test regularly. Sounds like your database should be using the full recovery model and that your backup plan should use a combination of full and transaction log backups.

Then when and how these are run will depend on your RPO and RTO (Recovery Point Objective and Recovery Time Objective). These need to be established based on the needs of your business.