A Member should establish and maintain a crisis management plan as part of its business continuity plan. The crisis management plan should include (but not be limited to):
(a) Emergency response procedures;
(b) Roles and responsibilities of the crisis management team;
(c) Command and control structures; and
(d) Salvage and restoration procedures.