The pharmaceutical incident, contained in nine days, illustrates an aggravator regulated operations face that rarely appears in security discussions: coming back online requires more than fixing the system.
In production under quality regulation, restarting a system involves documented verification that it's in a validated state, which consumes time after the technical problem is already resolved.
That changes the arithmetic of the shutdown decision. In an ordinary environment, precautionary shutdown costs hours; in a regulated one, it costs days, because the return is slow by design.
The same applies to sectors like food, aviation and financial services, where interruption has asymmetric costs and resumption follows its own process.
For anyone operating in those sectors, the preparation that most reduces damage is writing the resumption procedure in advance, with who verifies what and in what order, because during a crisis there's no time to work that out.