A lot of gaps not described in the letter:
Lack of independent management plane for core business assets. Driving to the office is not a management plane.
No external visibility of Rogers functionalities. The Kentik analysis of BGP and reachability suggests their tech staff had a lot of analysis to do before understanding of the problem.
No fallback plan in case of a misstep. No immediate detection of a misstep.
Four hour intervals in notifications (which implies lack of visibility into issues and absence of plans).
Secrecy regarding social and first-responder impacts (censorship of 911 call volumes for instance) suggests Rogers views these facts as existential risk, or at least of very high risk to their management.
