"More than IT"          951-732-7401     Subscribe to Cyber Security Bulletin

The Achilles' heel of Small Business

The tale is told of when Achilles was an infant, his sea-nymph mother dipped him into the river Styx to make him immortal. But since she held him by one heel, this spot did not touch the water and so he remained mortal and vulnerable, and it was here that Achilles was eventually mortally wounded. But the term Achilles' heel isn't used in medicine; instead, it's only used with the general meaning of a "weak point"

The “Arhilles’ heel” of small business is taking the time and effort to document processes, procedures, and plans in general.   

Nowhere is this more apparent than when it comes to creating a disaster recovery plan.  

According to a survey1 -  companies with fewer than 50 employees, only one in five (18 percent) have a disaster recovery plan. For many without a plan for their business, disaster recovery is simply a low priority (34 percent). Time (11 percent) or cost (15 percent) play little roles in the decision not to have a written disaster recovery plan in place.

September is National Preparedness Month and FEMA2 encourages all Americans to take steps to prepare for emergencies in their homes, businesses, schools, and communities.

What does a small business disaster recovery plan contain?

It establishes the procedures to recover your business following a disruption.

  1. Maximize the effectiveness of contingency operations through an established plan that consists of the following phases:

    1. Notification/Activation phase
      to detect and assess damage and to activate the plan

    2. Recovery phase
      to restore temporary IT operations and recover damage done to the original system

    3. Reconstitution phase
      to restore IT system processing capabilities to normal operations.

  2. Identify the activities, resources, and procedures needed to carry out your business processing requirements during prolonged interruptions to normal operations.

  3. Assign responsibilities to designated OPDIV personnel and provide guidance for recovering your business during prolonged periods of interruption to normal operations.

  4. Ensure coordination with other OPDIV staff who will participate in the contingency planning strategies.

  5. Ensure coordination with external points of contact and vendors who will participate in the contingency planning strategies.

By preparing your plan, you will know what to do when the emergency arises.