there are some other 'gotchas' that business-people forget-about when they install / use / begin to 'rely' on when their computers (and data) in their business  overwhelms someone

1.) remember who the data BELONGS to - are you doing what THEY WANT with their data
2.) policy (written, printed, signed(in-ink)) and stored 'off-site' - builds a 'structure' upon which your business is founded and upon which your employees can 'stand-on' (not have fall-on them!)
3.) TRUSTED legal and computer (and business continuance) expertise takes TIME to develop, it doesn't happen over-night.  IF you do NOT have it when you need it - you will CERTAINLY make BAD (Broken As Designed) decisions if you do so under 'duress' (in a crisis)...
4.) GOOD (even excellent) computer-hygiene is NEVER a bad-idea.