&quot;Have you ever...&quot; is the wrong question when it comes to risk management; the right questions are &quot;Is is possible...&quot;, &quot;How likely...&quot;, &quot;How can you avoid...&quot; and &quot;What&#x27;s the cost to avoid...&quot;.<p>Have you ever been killed in a car accident? No? Then I guess you don&#x27;t need a seatbelt, right? Has your house been burnt down by a lightning strike? No? Then no lightning rods and proper grounding for you, right?<p>You don&#x27;t wait until a disaster occurs before you put a disaster recovery plan in place.