Yet here we are today, finding ourselves with what may be the single biggest cyber-security event in New Zealand—certainly in the Government sector. And we're all wondering why, when several years ago we were saying to the ministry, what are your backup policies? What is your policy for power down? Questions like: how often do you back up from archive? Now, that might seem like a simple question. So everyone archives to a backup; that's fine. How many times do we actually bring that archive back into real data to show that it's worked? Well, a month or so ago—in fact, just after the cyber-attack—I asked Waikato DHB exactly that: when was the last time they did a full restore from archive? And the answer was over a year ago—over a year ago. You need to be doing these sort of restores at least yearly. Major organisations know this. They know that if you're not actually testing your archive, how do you know that when you need it—and goodness knows we've needed it here now—it's secure? And yet, for Waikato DHB, it was more than a year since they have tested their restore capability from backup.