The first time you run a clean room recovery should not be the day you need it. Organizations that recover fastest treat recovery as part of cyber security best practices. They do not buy a clean room. They practice one.