Disaster recovery planning involves more than off-site storage or backup processing. Organizations should also develop written, comprehensive disaster recovery plans that address all the critical operations and functions of the business. The plan should include documented and tested procedures, which, if followed, will ensure the ongoing availability of critical resources and continuity of operations.

The probability of a disaster occurring in an organization is highly uncertain. A disaster plan, however, is similar to liability insurance: it provides a certain level of comfort in knowing that if a major catastrophe occurs, it will not result in financial disaster. Insurance alone is not adequate because it may not compensate for the incalculable loss of business during the interruption or the business that never returns.

Other reasons to develop a comprehensive disaster recovery plan include:

• Minimizing potential economic loss
• Decreasing potential exposures
• Reducing the probability of occurrence
• Reducing disruptions to operations
• Ensuring organizational stability
• Providing an orderly recovery
• Minimizing insurance premiums
• Reducing reliance on certain key individuals
• Protecting the assets of the organization
• Ensuring the safety of personnel and customers
• Minimizing decision-making during a disastrous event
• Minimizing legal liability