1.Know the threats you are facing, and how and when they will develop (whatever industry you are involved in). Staffing and equipment limitations.
2.Create a written policy which outlines management’s commitment and intent, and specifies the response methodologies.
3.Create a response procedure assigning specific responsibilities to individuals to ensure that the plans can be executed efficiently.
4.Personnel performing these functions must be adequately trained if they are to respond adequately to the emergency.
5.The system must be monitored periodically, annually at the very least. The time frame will be determined by the nature of the business and potential for incidents.