Rinse and Repeat
Establish a process to continually re-assess risk at regular, predetermined intervals and trigger points. Process should include:
Localized Hazard and Vulnerability Assessment
How might a disaster have human, property, and operational impacts on your business? How might these change over time? How will this affect the way you prioritize the expenditure of mitigation resources?
Leased Space Due Diligence
What are your emergency communications procedures, post-event security protocol, vulnerabilities, etc. and have these been assessed and discussed with your landlord?
Exercise your contingency options to reveal gaps, make corrections, and increase confidence in your plan. Time estimate: varies depending on the size and complexity of the organization.