Help convince me I should be confident taking responsibility for:

* off-site db backups

* a guaranteed db restore process

* auditable access to servers

* log persistence and integrity

* timely security patching

* intrusion detection

so that my employer can save money.

How many URLs of Google et al failing to provide per instance security (leaking your files etc) to other users would you like to see?