Is it possible to be prepared for every disaster that might occur? Is disaster recovery really just a fancy way for information technology professionals to get larger salaries and pillage the coffers of poor companies? How can disaster recovery principles ever help a company to be more efficient or more profitable? Information security certifications such as the CISSP involve calculating the return on investment (ROI) involved in security measures. Is this a sound practice? Why or why not