Regular security testing, incorporating security best practices, keeping software up to date, and having a disaster recovery plan in place.