[o_nate]

A corollary to this is always have a good roll-back plan. It's much nicer to be able to roll-back to a working version and then be able to debug without the crisis-level pressure.

[sroussey]

Rollback ability is a must—it can be the most used mitigation if done right.

Not all issues can be fixed with a rollback though.