We do not promise that nothing will break again. Depending on what fails, recovery takes the time it takes.
What can change is what you are able to say while it lasts. The goal is being able to say, when something breaks: we need three days. Instead of: nobody knows when it will run again. That takes clear accountabilities, a practised procedure and reporting that shows the actual state.
There is one more thing, and it appears in no process description: composure. It has irritated superiors before.
After an update, a CIO could no longer get into his laptop. It held the papers for a board meeting that was about to start. He walked through the office with the machine in his hand. We waited until he was approachable and restored the login in time.
Another time a CFO had picked up ransomware that reached the network drives. He stood there, agitated, asking what had to be done now. The local network colleague was on leave, the nearshore colleagues had finished for the day. We went calmly through our own records, found a suitable colleague in the United States and alerted him.