Risk minimization should include considering of damage control measures. See the document entitled Business Resumption Planning for more detailed information on this subject. In particular, refer to the appendices, which provide a process guide and checklist. Contingency planning Contingency planning concerns restoring computer operations following an interruption. The purpose of this form of planning is to make it easier to recover computer operations through such means as backup data and systems, within a period of maximum acceptable downtime.
Contingency planning is related to business resumption planning, but is narrower in focus.
Planning for security during emergencies It may be impossible to carry out all normal safeguards during an emergency, owing to the general disruption that occurs and the priority concern for employee safety. Therefore, departments should develop and test plans to protect sensitive information and assets in the event of an emergency. An example of an emergency security plan is provision for the safe storage or rapid destruction of sensitive information during a building occupation. During an evacuation resulting from a life-threatening situation, employee safety takes precedence over all other priorities, including security. Written and verbal instructions on the security of sensitive information and assets during an emergency should emphasize this point.