Beginning to get a grip on continuity risk, where does it hurt and where will it hurt? Ensure the involvement of top management. Where will your business be one year from now? Three years? Be sure to have your strategy framing your risk assessment.
You cannot eliminate all risk. So, which represents a cost that you can live with and which of it is existential to your business? (Hint: many owners of processes and systems believe their area is prio #1. This is precisely why you must involve the execs.)