Earlier quoted context omitted.
If you fail to audit and test your disaster recovery procedures on a regular basis, then you fail at competently maintaining your infrastructure. No excuses.
I'm not disagreeing, I'm just saying that before people get drunk on schadenfreude they should put themselves in Atwood's position. If you pay someone for a service you generally expect it to work when you need it.
It's a lesson on what can and can't be "just bought".
Security and backups both need some top-down hands involvement. Also US recent experience dikes and air defenses are important too.