Industrial enterprises invest millions each year in solutions that are designed to keep mission-critical industrial operations safe from cyberattack. They employ a vast array of cybersecurity equipment and software to identify, protect, and detect all kinds of threats and attacks and to respond to them as quickly as possible. Traditionally, cyber security programs have focused on prevention – on keeping the attacks at bay. However, even with all the investment in prevention, ransomware and other malicious attacks are still breaching cyber defenses. When a breach occurs in the cyber-physical world and damage begins, the need for a fast and effective recovery process becomes painfully clear.