The challenge isn't just about protecting data against increasing risks and evolving threats but being able to recover when they do.