This article by Derbyshire County Council's Education Data Hub explains why schools should not post information such as their Critical Incident Plans or IT Disaster Recovery Plans on their websites. You can read it here, and there are links to more details information about what you should publish online.