Your small company (20 employees) has never had a disaster recovery plan but is now considering entering into a DRaaS contract with a major IT firm. You are surprised when you hear a member of the disaster recovery planning group mention that once the contract is signed, the company's worries are over. How do you reply?