The past few years have highlighted many newly recognized operational threats resulting from weather, fraud, data loss, terrorism, and other events. With each incident, the level of loss was significant, but an underlying theme revealed the inability of organizations to survive the threats. Some of these situations were so catastrophic that recovery was very difficult, but the recovery could have been easier with prior planning. More significantly, these recent events will likely repeat themselves in some form or fashion.