Security leaders looking to mitigate risk of black swan events in their critical infrastructure organizations can follow some steps to emergency-proof their organization, including looking outside their firm for perspective.
https://www.securitymagazine.com/blogs/14-security-blog/post/96834-emergency-proofing-critical-infrastructure-the-role-of-consultants