Both of these terms (response and recovery) require action. Action to respond to, and recover from, an event that poses a threat to stored data. For some organizations, the response to, and recovery from, an event like this, has been well planned and actually rehearsed. Their preemptive measures have protected the company from debilitating business interruption, serious financial loss, legal jeopardy, and reputational harm.