According to The National Institute of Standards and Technology (NIST), the Cybersecurity Framework says businesses faced with disaster should identify, protect, detect, respond and recover.