All organizations are susceptible to disasters and run the risk of having their business come to a complete halt or even a permanent closure. To prevent this from occurring, it is necessary for the organization to define policies for business continuity and disaster recovery, no matter how “safe” or “small” they think they are.
If the organization involves even one employee whose life could be at risk following a disaster, then do need policies and procedures in place to handle it. Defining the policy is the first and critical top step in ensuring the organization is prepared for foreseeable disasters and has the highest odds of recovering from it with minimal damages and losses.
The creation of these policies can then lead to procedures, practices, controls, and processes to fulfill the requirements of the policy.