Quick checklist that saved us time. Make alerting boring and reliable. Rotate credentials on a calendar, not only after incidents.