I’ve sat in more than one post-incident review where the room genuinely believed they were covered, right up until the moment they weren’t. Backups were running. Reports were green. And the business was still down for two days, or in a few cases weeks, because nobody had actually thought through what happens after the data…