3 Ways Small Businesses Can Be Prepared During National Preparedness Month

Sep 16, 2013 | Cloud, Data, Fresh Ink, Inside the Briefcase

Featured Article By Larry Lang, Quorum CEO

Most organizations understand the importance of keeping critical data safe from both manual and natural disasters. It is surprising, however, to hear just how many companies are not prepared for the day their system goes down and data is lost.

And yes, the day will come when data will be lost. Natural disasters, equipment failure, human error, and cyber-attacks are common causes of IT downtime, which can cost business owners up to $6,900 per hour, according to a report from Aberdeen Group. Beyond the compromised data, the loss of productivity can immobilize an entire business for hours or even days. Even with the best-laid plans, disaster can strike. Those who are prepared suffer the least.

This September, in honor of National Preparedness Month, I am sharing my top three ways small to mid-sized businesses can be prepared for the worst and always keep their data secured.

1. Automated Testing: Look into automated testing. Testing on a regular basis is crucial to business continuity. Ask yourself the question…does your vendor charge extra to test your disaster recovery system? How long will it take to test your recovery system? Some solutions take hours to spin up virtual machines. How hard is it to test your recovery system? Testing on a regular basis is crucial to business continuity, and it should be done more frequently than most businesses currently test. Many business owners don’t test at all! However, many small and mid-sized business run into barriers that make frequent testing difficult or impossible. Ask yourself these questions: Does your vendor charge extra to test your disaster recovery system? How hard is it to test your recovery system? Some solutions take hours to spin up virtual machines. How long will it take to test yours?

2. Backing up your data with a hybrid solution: When it comes to backing up your data, a business has three options:

– Tape and Disk backup — The traditional approach to disaster planning. The fact that setting up this type of backup can be complex and it may be difficult to recover entire distributed, multi-tier, multi-site workloads using this method.

– Cloud backup — An up-and-coming approach. While this method appears appealing, Quorum says, it may actually increase recovery time rather than reducing the time it takes to return to normal operations.

– Hybrid cloud backup — The combination of the traditional tape/disk backup with cloud backup. This makes it possible to keep an up-to-date image of what’s executing. Furthermore, it would be possible to immediately return to operations in a cloud environment.

Organizations are best served by setting up a “continuous back-up process” that relies on moment-by-moment snapshots kept in the cloud.

3. Attention to Details:  Any recovery solution should be effective when faced with a major disaster like a hurricane. But it should be just as effective if a power strip fails. Having a system that cannot handle a minor setback is just as troublesome as one that cannot recover from a major catastrophe. For a small to mid-sized business, it’s imperative to know what types of natural disasters can occur in the area and ensure the right backup solution is in place to handle them. Just as important is knowing what errors could occur in technical systems — whether a power outage or hard-drive failure. Do a back-of-napkin calculation on how long your vendor will take to recover your systems. Does your vendor need time to manually rebuild recovery nodes during the recovery process? Can you have an unlimited number of recovery nodes running at one time? If not, you may experience processing delays during the recovery process. Can the recovery nodes run inside the same appliance? Some vendors export recovery nodes from spare servers — and charge you for it. Ask for a recovery scenario demo to clarify everything.

All in all, using a disaster recovery solution that enables immediate recovery of data, applications and systems, along with frequent and regular system testing, is the only way to fully safeguard a company’s revenue, customers and reputation.

Having a disaster plan and tools in place to constantly monitor workload execution can turn most “disasters” into momentary annoyances rather than events that put companies at risk. Know your risks, plan ahead, and always be prepared.

About Larry Lang, Quorum Chief Executive Officer:

Larry Lang brings more than twenty years of global business-building experience to Quorum, which offers appliance and hybrid cloud solutions for one-click backup, recovery and continuity. His innovative views on business demands for rapid assured disaster recovery have been shared through industry forums like the International Legal Technology Association and the World Conference on Disaster Management, and quoted in publications like the Wall Street Journal and Forbes. He has led Quorum through substantial revenue growth and several rounds of financing.

Previously, as general manager of the Mobility Business Unit at Cisco Systems, Larry grew Cisco’s mobile internet business to several hundred million dollars, driven by the infrastructure demands of smart phones. Larry defined product strategy at Ipsilon Networks leading up to its acquisition by Nokia. Larry is especially adept at translating highly technical information into clear value propositions, and working with customers to understand how to support their success. Larry received a BS in Electrical Engineering from Duke and an MS in Operations Research from Stanford.

 

Top 10 Cybersecurity Stories This Week: Jailbroken DeepSeek AI Agent Runs Autonomous Two-Week Intrusion on European Telecom in Operation Snowball, Microsoft Patches 1,093 CVEs Including Exploited Outlook Zero-Day, N-able N-central 4EverAble2Shell Exploited Within Hours of PoC Release

Top 10 Cybersecurity Stories This Week: Jailbroken DeepSeek AI Agent Runs Autonomous Two-Week Intrusion on European Telecom in Operation Snowball, Microsoft Patches 1,093 CVEs Including Exploited Outlook Zero-Day, N-able N-central 4EverAble2Shell Exploited Within Hours of PoC Release

November 13, 2026 | ITBriefcase.net Story 1: Operation Snowball — Jailbroken DeepSeek AI Agent Runs Autonomous Two-Week Attack on European Telecom, Reportedly Accesses Millions of Patient Records Impact: CRITICAL Campaign Name: Operation Snowball Researcher: Malbear...

read more
Top 10 Cybersecurity Stories This Week: FBI Links $6.43 Billion Binance Heist to North Korea’s TraderTraitor, 11 AI Developer Platforms Breached in “Black October” LLMJacking Campaign, Florida DOE Breach Exposes 4.9 Million Financial Aid Records

Top 10 Cybersecurity Stories This Week: FBI Links $6.43 Billion Binance Heist to North Korea’s TraderTraitor, 11 AI Developer Platforms Breached in “Black October” LLMJacking Campaign, Florida DOE Breach Exposes 4.9 Million Financial Aid Records

November 6, 2026 | ITBriefcase.net Story 1: FBI Attributes Record $6.43 Billion Binance Crypto Heist to North Korea's TraderTraitor Impact: CRITICAL Threat Actor: TraderTraitor — North Korea-aligned group, also tracked as Jade Sleet, Pressure Chollima, PUKCHONG, Slow...

read more
Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

Top 10 Cybersecurity Stories This Week: Oracle EBS and FreeSWITCH Under Active Exploitation, 1.5 Million Anonymous Crime Stoppers Tips Exposed in Navigate360 Breach, APT28 Deploys In-Memory HOOKEDGE Backdoor Against NATO Defense Contractors

October 30, 2026 | ITBriefcase.net Story 1: Oracle E-Business Suite CVE-2026-101767 (CVSS 9.8) — Unauthenticated SQLi-to-RCE Actively Exploited in the Wild Impact: HIGH CVE: CVE-2026-101767 CVSS: 9.8 (CVSSv3.1) Product: Oracle E-Business Suite (EBS) — TCF servlet...

read more
Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more