CIOL: What must be the steps taken by an organization, in terms of best practice, to prevent a possible potential disaster?
VM: The organization should consider this as a practice rather than a protection mechanism only. It should be introduced in the same way like Six Sigma, ISO, TPM, TQM, etc. The organizations need to have business continuity governance. There should be a full-time management representative to continuously monitor and improve the practice. A periodical audit is required to ensure its sanctity.

CIOL: What should be the basis for selecting DRP?, Should recovery time objective ( RTO) and recovery point objective (RPO) be the barometer or should it be dependent on the situation?
VM: It definitely depends on the scenario. Verticals like retail, healthcare, banking, insurance, etc., may choose recovery time objective. Maybe, verticals like manufacturing may choose recovery point objective.