How to build a data protection plan that ensures application recovery