Depressingly few organisations I've worked in or with have a clearly defined set of RPOs and RTOs for their essential systems, and similarly few have regular pr

Depressingly few organisations I've worked in or with have a clearly defined set of RPOs and RTOs for their essential systems, and similarly few have regular processes to test their backups and archives to either confirm the process works, or to determine how long a recovery would take. This stuff is all conceptually very easy to do - but politically extremely difficult to agree on the definitions, and then obtain the resources on the ops side, presumably because it's yet another of those things that fits in the category of being hidden and non-urgent, and therefore a low priority, right up until the moment it isn't.