I agree with what has been said. Have an IR plan written up before hand so that when something happens you aren't running around screaming yanking out cables. Containment is important, have a way set up to where if something happens, you can contain it to one machine. If the machine is not mission critical, you can disconnect it from the network.
Have regular backups made, and validate them. Check them periodically to make sure they work correctly. I've heard of too many companies that go to back up their systems, only to find that all the backups they have are corrupted because they weren't created properly and checked.









GAWN - GIAC Assessing Wireless Networks : Karen Millen Dresses Things did improve as the decade gone on





