Start now

You need to identify the important files you handle and evaluate the common risks to those assets

Know how the data moves, and decide how long you can be down, and how far backups need to go.

Then develop procedures to make sure the plan is done and tested