Strong list — the monthly form test is the one I'd underline, since broken contact forms fail silently for weeks. Also worth a line: verify backups include the database plus uploads folder, not just the files. A restore without the DB is only a half-restore.