Accordingly, maximum acceptable periods of downtime and the minimum essential level of service for information technology systems should be defined and documented. Secondly, threats to essential services should be analyzed and assessed. This will focus attention on high priority preventive and recovery methods. Setting priorities in this fashion will result in more realistic and affordable plans and thus generate greater support. Lastly, the planning process should include an assessment of risks, and recommendations on how to manage them.
Risk refers to the chance of significant losses of service related to various scenarios.
Risk management options include minimizing, avoiding, and accepting risk. Risk minimization should include considering of damage control measures. See the document entitled Business Resumption Planning for more detailed information on this subject. In particular, refer to the appendices, which provide a process guide and checklist. Contingency planning Contingency planning concerns restoring computer operations following an interruption.