I've had countless encounters with C-level execs who could recognize that if theur point of sales software was down, it meant a loss of x M€/day, or that if this SCADA system crashed it meant casualties within the work force. They could be rational enough to attach a price tag to these events
Despite this, it always went back to "yeah but last time my computer crashed, little Timmy fixed it, it's a no brainer, and my IT director has these things called backups".
The same people have contingency plans for anything non digital (including services like Blackwater guys or kenyon and so on), but digital has "no real consequences".
I hoped the Maersk disaster of last year would lead to a change of mind, but unfortunately we're not there yet.