Infrastructure

Servers and cloud accounts set up so they can be rebuilt, not just restarted.

Email that arrives, from a domain nobody else can send as.

Domains that do not expire, with records that are written down.

Backups that have been restored from at least once.