Right now, there's an unpleasant bug going around. No, not a computer virus, a human one. The first symptom is a blinding headache - literally blinding, people who get it say they weren't able to read for a few days their heads hurt so bad, or they can't move their head without excruciating pain. I've got the bug too, so far I can still focus my eyes most of the time, but I'm not getting any real work done. I did get some stuff done yesterday because it needed to be finished, but I went through it slowly and double- and triple- checked everything I did. I'd have vastly preferred to given the tasks to someone else to finish and gone back to bed. Well, really I'd vastly prefer to not have the cold/flu, but that plan isn't working out so well.
When we build mission critical systems, we build in redundancy. A lot of it. We build systems so that they can handle multiple points of failure. We pay for vendor support so that if a critical component goes down, it is fixed or replaced within a certain amount of time. All of this costs real money, and we spend it to manage the risks inherent in the components of the overall system.
What about the people who run the systems? How good is the redundancy in the people involved? Are they cross trained to handle different failure types? If you have someone out sick (or worse, to use the standard quote, if they get hit by a bus), how well can your organization handle that type of failure?
With the pace of modern business, especially in the technology sector, business tends to not to have quality human redundancy. People are expensive, and so businesses tend to give them tasks that aim for the bottom line, not ones that don't directly or obviously have a return. The problem (as you know far to well if you're in the infosec business) is that a failure in the human side of the business can be far more damaging that a failure in a piece of technology.
Redundancy is a type of insurance to mitigate risk, do you have it?