It is what you don’t know that will kill you.

Threat actors break in, lurk, then act when they know what will hurt most.

If no, they either don’t have an IRP, or don’t know if it works, i.e., during a fire is the wrong time to find out the exit door is locked!

Many organizations just confirm the back up ran, not if the data is good.