What matters is not whether a disaster recovery plan exists, but whether recovery is repeatable, auditable and operationally ...