No 4: Flirt with disaster
Many organizations think they have a disaster recovery plan in place, only to find out too late it's inadequate. And it's more than just backup: It's about having a strategy that makes sense in real-world situations -- when more than just your technology is down. Update your strategy regularly and perform dry runs. Unless you can show it truly works, you don't have a plan.