DR targets invented during an outage are always wrong. Define them when everyone is calm.
Business-driven targets
RTO/RPO must map to revenue and operational impact, not engineer comfort.
Prove restores
Untested backups are fiction. Schedule restore drills and record actual timings.
Runbooks
Write who declares an incident, who communicates, and which systems restore first.