Presumably you expect that your IT guys can recover the system. What if they cant? What is at stake? It could be a media nightmare causing a run on the bank in the case of a computer virus. Are you and your staff really ready to handle such disasters? Does your business have a real capability to dig itself out of such difficulties and recover successfully? You may be relying on the existence of a paper plan which has been gathering dust since last years audit review.