[tnolet]

Good list, I’d add

- private networks, using bastion hosts to access when needed.

- very robust and regularly tested backups in case someone screws up the data.

- hardware tokens to access and authenticate any critical parts.

[mars4rp]

-we have our servers in house so we ship a hard disk with all the data and source code every month to other side of country.