Pepper, encryption, they both guard against drive-bys, which can happen for sure (missing backups anyone?) but they're not the only thing that can happen.

Like any disaster preparedness situation, make sure your strategy doesn't count on an asset you've already listed as unavailable.