The monthly continuity drill covers domains, billing, recovery paths, backups, human fallback, and one low-risk recovery test. What would you add or remove to keep the drill realistic and repeatable?