Your EDP vendor, CPA firm your CEO hires should be your two best resources. The fact you outsource your host EDP is a good plan. They must have a disaster plan in place if they provide services to FDIC, OCC, or OTS banks. You must include all critical functions including hardware, software, data files, communications, Fed Line. You decide what is critical.