Business impact analysis — identify critical functions and recovery priorities
5wRisk assessment and threat matrix — natural disasters, cyber, supply chain
5wEmergency response team — roles, contact tree, and escalation paths
5wIT disaster recovery plan — data backup, cloud redundancy, and failover
4wRemote work enablement plan — VPN, hardware, and communication tools
4wCrisis communication plan — internal and external notification procedures
5wSupply chain disruption response plan
4wTabletop exercise — simulate a ransomware incident
5w