An organization should have tested short-term and long-term recovery mechanisms in place. Again, let me stress “tested” and “in place”; in the heat of a crisis, it is very difficult to invent these things on the spot. If you are not anticipatory, then you are forced into patching things up after the fact.
The last phase is continued learning and reassessment to improve what you’ve done in the past.