95/5 Theory
95% of a PIO’s work is conducted in non-emergency times
5% of time and effort is directly related to incident response or recovery