Temporary admin, safe access to hosting/CDN, 1–3 day onboarding.
Schedule & retention, partial/full restore, integrity checks.
When to stage, cadence, post-update test checklist.
Page vs object cache, image/fonts/3rd-party scripts, CWV tracking.
Password policy, 2FA, licensed software, access logs & alerts.
Report channels, severity ladder, remediation workflow.