I would add a couple of important things:

- mention of the 3-2-1 backup rule

- include emails and other social accounts into the backup strategy

- validating and restoring backups is as important as creating them