Start by assessing risks, then define emergency procedures, assign roles, train employees, and conduct regular drills. Continuously update the plan based on feedback.