Cyber incidents are now the number one risk to small businesses, closely followed by the rapid misuse of artificial intelligence by criminals.
Despite this, most SMEs still don’t have a usable disaster recovery plan.
Not a theoretical one.
Not a 50-page PDF.
A plan you can actually use at 2 a.m. when things go wrong.
The good news? You can create one in five minutes.
When Disaster Strikes, Reality Looks Like This
Imagine this scenario:
Your server is encrypted.
It’s 2 a.m.
Backups might be compromised.
Customers are offline.
Now ask yourself:
- Where is your disaster recovery plan?
- You don’t have one
- It’s locked inside the encrypted server
- It’s buried in a document nobody has ever opened
This is what we see every time ransomware hits.
The result is always the same:
- Panic
- Unclear ownership
- Frantic calls to find insurance details
- Hours lost while systems stay down and revenue disappears
A serious IT outage can cost around £8,000 per employee in downtime and lost productivity.
The first few minutes matter more than anything that follows.
Why One Page Beats a “Proper” DR Plan
Most businesses fall into one of three categories:
- No disaster recovery plan
- An outdated plan nobody can find
- A huge document nobody has read
During an incident, nobody reaches for a binder.
What works is a single, clear, one-page plan that tells you:
- What to do
- Who is responsible
- Who to call
- Where critical information is stored
This is the 5-Minute Disaster Recovery Plan.
The 5-Minute Disaster Recovery Plan
Forget long documents. Here’s what actually matters.
1. Insurance Details (1 minute)
Write these down:
- Policy number
- Claims hotline
- Claims email
- Policy expiry date
When systems are down, you cannot look this up. You will need it immediately.
2. Key Mobile Numbers (1 minute)
Record real mobile numbers, not office extensions, for:
- Business owner / Managing Director
- IT provider or MSP
- Insurance broker
- PR or communications contact
If phones or networks are down, landlines won’t help.
3. Who Does What (1 minute)
Make responsibilities crystal clear:
| Task | Owner |
|---|---|
| Declare the incident | IT / Technical |
| Authorise spend | Decision maker |
| Contact insurance | Decision maker |
| Manage customers & press | PR / Comms |
| Inform staff | Decision maker |
| Technical recovery | IT / MSP |
No confusion. No assumptions. No delays.
4. Where Critical Items Are (1 minute)
Write down exactly where to find:
- Backup location
- Clean USB drives
- Printed procedures
- Full disaster recovery documentation
If someone unfamiliar had to step in, could they find these?
5. First 30 Minutes Checklist (1 minute)
Keep this simple and visible:
☐ Isolate infected devices (do not power off)
☐ Declare a major incident
☐ Call key contacts
☐ Call insurance (quote policy number)
☐ Engage IT/MSP
☐ Begin recovery process
That’s it.
One page.
Fast.
Usable.
Print It. Laminate It. Share It.
Once complete:
- Print it (A4 or A3)
- Laminate it so it survives chaos
- Fix one copy to the server rack or network cabinet
- Give copies to everyone named on it
- Keep a copy off-site with whoever makes decisions at 2 a.m.
A laminated A4 sheet might be the best investment you ever make.
Important: Protect the File
This document contains sensitive information.
Before saving or sharing it, set a password.
How to protect it:
- Windows Excel:
File → Info → Protect Workbook → Encrypt with Password - Mac Excel:
File → Passwords → Password to Open - PDF:
Apply password protection before sharing
Store the password in a secure password manager and keep a sealed paper copy somewhere safe.
Never email the password in the same message as the file.
A Quick Test
It’s 2 a.m. on a Saturday. You’ve been hit.
Can you answer these instantly?
- Who do you call first?
- What’s your insurance policy number?
- Where are your backups?
- Who communicates with staff and customers?
If not, you need this plan.
Final Thought
This one page puts you ahead of 99% of small businesses when it comes to incident response.
If you’d like help creating, reviewing, or testing your disaster recovery plan, Tech Results can help.
Because when things go wrong, preparation makes all the difference.
