b. Alot of knowledge resides in peoples heads.  Redundancy of critical data does little if you lose the people who are the only ones who know what to do with the data.  Your first priority is the safety of the people.  However, make sure that  processes are documented, and make sure that multiple people know how to recover and run critical processes.

c. Remember that electrical power, phone connectivity, Internet connectivity, physical location, are all vital to your organization.  Identify options to deal with the temporary loss of any of these basic systems.

d. Contact information for vendors, employees, and emergency agencies all need to be accessible assuming the worst case scenarios.  Any other pertinent and critical documentation should be accessible as well.

e. Do not count on a human response during a disaster.  It is not a viable option to have critical information in a set of files that someone will carry outside in the event of a fire.  The first priority is saving human lives.

4. Once approved, implement the action steps required to get the company prepared for disaster.

5. Test all the systems in the plan.  Do not wait for a disaster to occur before finding out that the backup programs were not functioning correctly.  The plan should contain the basic steps required to effect the recovery.

6. Review the plan every 6 months.  Your business is continually evolving, and as new systems are put into place, adequate recovery systems should be put into place as well.  A regular review cycle will assure this is happening.  The plan should be updated to reflect any new changes.

Some useful links for finding out more about Disaster Recovery: