Essentially, the plan addresses the who, what, where, why and when of recovery. Goal number one is to reduce the risk profile of the business. Goal two is to be well prepared so the impact of any disruption is minimized. Overall, the objective of the plan is to effectively minimize the chances of disruption and, if there is a disruption, to quickly implement the recovery and get the business or organization working again. The "why" is to maximize business continuity and minimize damages to company assets. Ultimately, the goal is to protect the organization from the key risks identified and to effectively implement the recovery strategies.
The "what" is a clear, detailed, but focused business continuity and disaster recovery plan, a plan that provides a successful road map to minimize business interruption and maximize business continuity.
The "who" refers to the teams. The recovery effort is focused through teams. While the Emergency Management Team is the leader of the recovery efforts, other teams could include: IT, telecommunications, facilities and power, customer relations, public relations, billing, customer service, and human resources.
The "where" is, of course, company facilities, but it's also other alternate sites, location of all employees and the ability to find and communicate with employees. Effectively organizing and deploying employees is the most fundamental requirement for successful recovery.
And finally, there is the question of "when." Unfortunately, hackers, hurricanes, fires and other risks seldom follow our agenda. The "when" we can control is the "when" of lowering the company's risk profile by implementing solutions before the problem develops. "When", of course, also has to do with the priorities of the recovery. These hopefully would be in place as a result of selecting effective strategies.
If you do not know where you're going, any road will get you there. The business continuity and disaster recovery plan is the road map to get you to your destination of minimizing risks, mitigating damages and reducing your risk profile.