Design resilient architecture

Separate public site, control plane and customer environments.

• Authenticate every administrative interface.
• Use least privilege between databases, services and repositories.
• Plan capacity, monitoring and incident ownership.