Not all disasters are created equal. Tornados call for sheltering in a basement away from windows, floods call for finding higher ground, and fires mean leaving the building altogether. Depending on the nature of the incident, the instructions for immediate safety and recovery are vastly different. The logic behind these protocols is obvious, so why are security plans so often switched, confused, or ignored in cyber disasters?