Great advice. This sort of work should be done at the same time as a risk management plan for any business.