ISO 27031 provides a to answer: "If our critical IT systems fail for X hours, what exactly do we do to keep the business running?"