. . . . "Usual security and operations policy and procedures are simply not enough to adequately protect your personnel, customers and other persons, facilities, assets and records from disasters -- and the predictable aftermath." .