What are the essential elements of a disaster recovery/business resumption plan? How is the plan developed?