Cyber incidents now outpace natural disasters, forcing IT leaders to rethink recovery as a daily operating capability.