Phoenix as a hot wallet for spending, geographically distributed multisig with regular check-ins for ultra cold storage and a HW in a singlesig setup as a layer between both.

Basically as described by @DarthCoin here.