In many cases, the difference between rapid recovery and prolonged disruption can be traced back to decisions made long before an incident ever occurs ...