Active Directory is one of the most vulnerable access points in an organization’s IT environment. Companies cannot wait for a real attack to pressure-test their AD recovery strategy.
Source: htdarkreading.com