A business recovery team is responsible for reestablishment of normal operations after the crisis is over.
Others, such as pandemic disease, affect human resources while leaving buildings and machinery intact.
A cyberterrorism attack might bring down your network but not affect the functionality of the hardware or your personnel.
This is no time to have department heads squabbling about who has decision-making authority.
And remember that some types of disasters may result in loss of personnel (or some of your staff may be on vacation or out sick when the event occurs), so be sure to assign alternates in case some of the important players are not available.
Information should be included for both internal personnel (CEO, CIO, legal advisor, etc.) and external personnel and services (police, fire, ambulance, security services, utility companies, building maintenance, etc.).
It will take teamwork to manage the crisis itself and to put things back together once the immediate crisis is over.Too many organizations meticulously make backups of everything and then store those backups in the server room.If a tornado, flood, or bomb destroys the building, that (often irreplaceable) data is gone, too.Thus your plan should cover contingencies for as many threat types as possible.A key component in any crisis management situation — which is what you have during and perhaps immediately after the disaster — is assignment of areas of responsibility and establishment of a chain of command.Copies should be stored off-site — an obvious but often overlooked requirement. Your company's response to a disaster will depend on both the nature and the extent of the disaster.Some threats, such as a tornado or flood, may physically destroy your IT infrastructure.A comprehensive business continuity plan (BCP) provides a roadmap for continuance and/or restoration of mission-critical functions during and after a disaster, such as a fire, flood, tornado or even a disease epidemic.Your BCP must be thought out, written down, and distributed to key personnel well ahead of any incident that could cause a disruption to your operations.Your plan should include up-to-date contact information on people and entities that may need to be contacted when a disaster occurred.This is no time to be scrambling for phone numbers.