If a disaster recovery plan does not already exist, it will be necessary to initiate the preparation of the first version of such a plan. In order to initiate a planning project for the first time, the Board and/or top level management would normally receive a proposal. Projects as important as DRP development should be approved at the highest level to ensure that the required level of commitment, resources and management attention are applied to the process.

The proposal should present the reasons for undertaking the project, and could include some or all of the following:

• Increased dependency by the business over recent years on computerised production and sales delivery mechanisms, thereby creating increased risk of loss of normal services
• Increased dependency by the business over recent years on computerised information systems
• Increased recognition of the impact that a serious incident could have on the business
• Need to establish a formal process to be followed when a disaster occurs
• An intention to lower costs or losses arising from serious incidents
• Increased likelihood of inadequate IT and information security safeguards
• Need to develop effective back up and recovery strategies to mitigate the impact of disruptive events
• Avoidance of business failure from disruptive incidents