After that the organization will need to do a business impact analysis to find out what it can afford, what

it will lose and what the effects of not have a BCP will do to the organization. Step 5 would be to
determine the strategy to recover from the disaster. Step 6 would be to collect data on the disaster, outage,
resources and several other vital portions of the organization in the time of need. Another important step
is to establish an Emergency Operations Center.
The scale and scope of data collection may be greater with policy evaluation. ƒ Policy evaluation may
require increased emphasis on the use of surveillance and administrative data. ƒ The type and number of
stakeholders involved may differ.