The site is usually the only system every customer touches, and the only one nobody has assigned an owner.
Treat it like production infrastructure
- —Know who can deploy, and remove everyone else.
- —Back up content and media separately from code.
- —Patch on a schedule rather than after an incident.
- —Alert on the checkout or the contact form, not just the homepage.
None of that is glamorous, and all of it is cheaper than the week you spend rebuilding trust after an outage.