Very timely as I myself need to do a security audit, which begins with the basics, and then moves on to the implementation of periodic "fire drills", the "what if everything went wrong" kind of drill that requires a documented plan in place.

Had a scare with one of my main email accounts today. Puts the fear of God into you.

Anyhow, good job. It all starts with a good backup!