good post, I'd add a small often overlooked point is that you should be very careful with your backups and your encryption keys.