Earlier this month the grocery group Ahold Delhaize took systems offline across most of its US and European brands after detecting a security issue in its network. Websites and apps were down for about a week and some distribution centers stopped, but the CEO has since said publicly that the investigation confirms it was the right call.

A decision like that gets made before anyone knows how bad things are. Afterward it’s easy to second-guess, especially if the damage turns out smaller than feared.

In your org, would the person who made that call get backed, or would they end up explaining the lost week?