I mentioned this checklist at the last MZA TUG meeting - some of it is specific to CMA, but most of it should apply to most organizations.
Many thanks to Gawain Lavers who originally posted it over here.