Disaster Recovery

I realize that the majority of corporate environments today have either an out dated disaster recovery plan or none at all. I am at the starting point of creating, not only a Disaster Recovery Plan, but a process for adapting this plan to future changes to keep it effective.

My starting point is this:
1. Visit each department and find out what data and applications are vital to them and what amount of downtime would be acceptable to them in the case of an environmental outage. I will balance these results against what they are willing to budget, for this “insurance.”
2. Here is where I am a little cloudy, do I then move directly into step-by-step process? Or is there a step or two I am missing?

Thanks in advance!