Seasonality changes the risk profile
For accounting and advisory firms, a two-hour outage in March is not the same event as a two-hour outage in July. Redundant internet, tested recovery and change freezes during peak periods are practical controls, not luxuries.