Sand, the best answer to your question is to refer you to the WTC lessons learned recently published by Computerworld at: http://www.computerworld.com/managementtopics/management/recovery/story/0,10801,72192,00.html
The WTC's largest tenant, Morgan Stanley, had a little over 3,000 employees in the WTC 2 at the time if the first plane impact, yet lost only six personnel and were back in production the next day. This type of response shows the value of a totally integrated physical security and business continuity operation that has been tested and practiced as established in BS-7799. No matter how good the plan, if it is untested, never practiced and people enabled to implement it, it's worse then worthless! The article speaks for itself regarding the entire operation and it's benefit. Budgetary figures are included that are possibly scalable to your situation based upon such assumptions ($30 million+ annual for 3,000 employees or $10k+ per employee). Regards, Jim
