Resilience and recovery

- Backup architecture (3-2-1, immutable, tested) - Disaster recovery and BCP - Ransomware readiness - Incident response retainer and tabletop cadence For each domain provide: current state assessment (maturity level 1-5), gaps, target state, and prioritized initiatives with effort/impact scoring. Include an architecture diagram description and a 12-18 month roadmap.