Possible Duplicate:
Best way to safely host a high volume online transactional wallet?

There have been numerous incidents where bitcoin services have been hacked and large amounts of bitcoins have been stolen. There was even an exchange that accidentally deleted its only copy of its bitcoin wallet.

Which best practices should a service or merchant follow when handling bitcoins?