Business continuity and risk mitigation requires constant attention, analysis and testing because we simply never know what type of crisis we will be faced with. COVID-19 has demonstrated this fact clearly.