It’s better to take the initiative and implement a cyber-focused, recovery-first plan before the attack happens.