The Iranian cyberattack on Stryker is the kind of stress test that business continuity and disaster recovery programs often do not plan for.