Start with decisions, not documents
A useful resilience plan tells people what to do. Name who can make time-critical decisions, agree which services must recover first and keep essential recovery information somewhere your team can reach during an outage.
Give every responsibility an owner
Assign technical response, business continuity, legal advice, customer communication and supplier coordination before an incident. If two people believe the other person owns a decision, nobody owns it.
Test the decisions under pressure
Run a realistic scenario to expose assumptions, missing contact details and hidden dependencies. Record the lessons, update the plan and set a date for the next exercise.