A practical starting point.
ACCOUNTS
Domain auto-renewal enabled Registrar contact details current and independent Two-factor authentication enabled, recovery codes stored Critical accounts recoverable to an independent address
BACKUPS
Website files and database, off the server Business records in more than one place Customer data backed up Several versions kept A restore tested
DOCUMENTATION
Where everything is Who has access How key tasks are done Key contacts
Kept somewhere reachable when systems are down.
PEOPLE
Someone else can access what is necessary Someone else can do critical tasks Your family knows where to start
CUSTOMERS
An alternative contact method they know A draft message ready
TESTING
A restore, annually Account recovery, annually
REVIEW
The whole plan, annually.