After a decade of helping Orange County businesses recover from cyberattacks, I've seen the same five mistakes destroy companies. Here's how to avoid them—and the emergency calls at 2 AM.