First: Welcome to the forums
Second: The solution of csinetops is certainly a good one. Another one could be tapes or rotating devices. And finally there is indeed the possibility to do a backup copy job to a repository off-site.
A few things to keep in mind:
1. Cloud Connect provider: Easy to use. No additional hardware/ maintenance and so on. Plus, those backups are more or less "air-gapped" which means that you normally can recover in case of Ransomware. While indeed mostly not expensive, it will be a bit more expensive as (for example) tape but peace of mind and less work that you have to do yourself is also something that comes with less cost
2. Tapes: Still very popular (No, tape is not dead
) but that means you need to handle the tapes yourself (They are air-gapped so that is great) but you need to do the handling yourself and get them offsite also. Most probably (in most cases anyway) still the cheapest solution
3. Rotating devices: Good solution, but again comes with a cost of "handling" the devices. Ideally those would be located offsite, but you are probably not there every day
4. Backup copy job to offsite location. You don't need a secondary backup server. Do a backup copy job to a repository server offsite. In worst case scenario (meaning you lost also the VBR server), you go to the offsite location, install a clean VBR server (which doesn't take that long), do a scan of the repository and you can start restoring whatever is needed.
My advice would be to investigate first:
1. Will I be at the offsite location or is there someone who can do some work
2. What is the money I want to spend on it and do I also have the time (or FTE) to do that additional work
3. What is my RTO in case of a restore from those archives.
Based on these responses, you can investigate the different options and choose what is best for your organization