1. Organize and build the planning team
2. Assess risk and vulnerability
3. Assess capabilities
4. Develop the mitigation strategy
5. Obtain mitigation plan approval and adoption
6. Determine plan maintenance process