At McGill University (Canada), rather than implement a costly, high-tech contingency and disaster recovery plan for information services, planners focused on risk assessment and avoidance for central and departmental information systems. Actions included better backups, less dependence on key individuals, and an institutional awareness campaign.…