According to UNEP (2008), disaster risk management is the systematic process of using administrative decisions, organization, operational skills, and capacities to implement policies, strategies and coping capacities of the business to lessen the impacts of natural hazards and related environmental and technological disasters. What are some of the strategies that the IT department will initiate to restore AIS when there is a disaster? Using BP for instance, if the IT system on the oil rig was affected, what will be the proper procedures to restore it ?