Create a written IT security policy that identifies critical assets and defines policies for physical security, account management, and backup and recovery among other areas.

FORBES: Do You Really Need Cyber Liability Insurance?