“Focus on ways to recover mission critical operations in the event of a disruption,” Eskins added. “Use tabletop exercises, vendor assessments, and case studies to help determine what the right defense and recovery measures should be. Establish robust processes and policies, so that everyone knows what they should be doing day-to-day and when a crisis materializes. Finally, build this into a plan for recovering from an incident – and test it regularly.”