Contingency plan, disaster response plan, and disaster recovery plan are overlapping plans contained in the business continuity plan. Developing a contingency plan involves identifying the information systems and data that are vital to the organization. It also recognizes different types of risks and threats there might be to information systems and the data they contain. Based on your own organization, what types of threats would be detrimental to the organization? What controls should be in place to mitigate the impact of these threats on the systems? How would a contingency plan help prepare for the worst and plan out steps in advance to thwart a disaster or attack? How would you test a contingency plan?