Kinda scared to share this, as I hope to launch a mailing list reminding people to do these sorts of things, but here’s the outline I’ve collected:
Document procedures
Test procedures
Backup
Verify backups
Store recovery information offsite
Take down a subsystem and see how rest of your system handles the problem
Perform a load test
Run an intrusion test
OWASP
Patch software
Document all software versions
Build a hot backup
Switch to hot backup
Document your database schema
Perform a database dump
Verify you can load your database dump
Automate manual procedures
Make a smartphone control panel for your system
Verify you can recover site using only a smartphone
Design for scalability
Design for recoverability
Evaluate technologies used
- can you easily hire contractors
- is it still being supported
Prepare support for when you are away
Have an unannounced vacation/emergency and see what happens
Evaluate your overall readiness
Create a business continuity plan
Create a succession plan
A/B test
Review your pricing, segmentation
Get detailed feedback from a customer
Think about how you could pivot your product to a different market
Test your (contact) forms, contact email addresses, etc.
“Simple exercise: use an actual credit card to buy an actual copy of your product quarterly. That experience is important but hidden to you.” —Patrick McKenzie @patio11