Disaster Recovery Strategies Need to Account for Risk