If a disaster recovery plan does not already exist, it will be necessary to initiate the preparation of the first version of such a plan. In order to initiate a planning project for the first time, the Board and/or top level management would normally receive a proposal.
Projects as important as DRP development should be approved at the highest level to ensure that the required level of commitment, resources and management attention are applied to the process.
The proposal should present the reasons for undertaking the project, and could include some or all of the following:
Increased dependency by the business over recent years on computerised production and sales
delivery mechanisms, thereby creating increased risk of loss of normal services
Increased dependency by the business over recent years on computerised information systems
Increased recognition of the impact that a serious incident could have on the business
Need to establish a formal process to be followed when a disaster occurs
An intention to lower costs or losses arising from serious incidents
Increased likelihood of inadequate IT and information security safeguards
Need to develop effective back up and recovery strategies to mitigate the impact of disruptive events
Avoidance of business failure from disruptive incidents.