Encrypted backups for websites, servers and databases, each one test-restored into a sandbox and checked before it counts as a restore point.