I would be interested to know more about the authors employment. As a small business owner, my DR plan is oriented to reasonably preventing getting locked out

I would be interested to know more about the authors employment. As a small business owner, my DR plan is oriented to reasonably preventing getting locked out or screwing things up for customers in the event of an emergency. I learned a lot about what to do and what not to do leading SOC 2 Type 2 audits at a large firm. Our auditors handed us a bunch of templates that they had purchased from an even larger firm. They said we could adopt them verbatim, but that we should at least read and probably modify them. Management was… stressed… that we had paid close to $100,000 for that to be their policy “analysis”. I was tasked to read through all their templates and sort out what was and wasn’t necessary, compare to how we actually did business and what we gave two shits about, and produce work that closed the gap. (That’s another story; turns out it’s really hard writing policy for a business where both (active) founders and the CEO are looking for different things.) It helps to plan for abstract scenarios, like “we lost the office but the people are alive”. Or “we lost all facilities and people in this state, but not the next one over”. It also really helps to have management who understands the reality that not everything can be planned for, and that any DR strategy worth its salt has some kind of line in the sand beyond which you can’t do anything.