Part of risk mitigation should include disaster preparedness and or recovery discussions. Does your company have a plan/plans? Is your team local or virtual? Do you know all the contingencies?
For example, teams in California, Alaska and Hawaii (the 3 most seismically active states) have a different set of disaster needs/plans that those who live in hurricane or typhoon locals. How about those in tornado country, wild fires prone areas, tsunami areas, or airport take-off or landing approaches (the most likely areas for plane crashes)? Do you have team members in South America or Africa that have war or guerilla insurgency activities about them?
When disasters strike; not everyone stays calm, even if they have well rehearsed disaster plans. Employees, beyond the immediate issues of their own health and those closest to them at the time of an occurrence, soon shift focus to their families. Do you have remote team members who will need assistance…do you know? It is worth discussing with you team. There may be hidden risks you are unaware of. If you can help them, you reduce your/company risk, while being a pretty decent human being. Business is (or at least should be in my opinion) all about people, and our relationships with them.
And then there is the disaster recovery. Are you sure everything is being backed up? Can you retrieve it? Can other team members retrieve it? What happens if …. You need to ask the questions and rate the risk accordingly.