Disaster Recovery not in Small Biz Plans

Monday, January 16, 2012 @ 10:01 AM gHale

It is not surprising because of short staffing, but when it comes to planning for the worst, small businesses don’t even come close to being able to tackle a serious dilemma.

Nearly 90 percent of small and mid-size businesses have inadequate or outdated disaster recovery plans, according to a study from automated security and compliance auditing solutions firm nCircle.

Small Businesses Don’t Fear Threats
Targeted Attacks on Rise
Malware Alert: Android up 472%
Busted: Ghost Click Nets Six

On the positive side, the survey shows 51 percent of small and mid-size businesses have a disaster recovery plan, but the problem is they are not even sure if it is current. Of those surveyed, 13 percent said they didn’t have a plan at all.

Nearly 40 percent of businesses that did report having a plan said it went no further than backing up data.

“The number of small businesses that have no written security or disaster recovery plan is a significant concern,” said Elizabeth Ireland, vice president of marketing for nCircle. “It seems counterintuitive, but even though smaller businesses have fewer resources, they need to pay more attention to security rather than less.”

The study also shows that a lack of proper security policies is leaving many companies vulnerable to a potential disaster.

Nearly 20 percent of the surveyed businesses lack a security policy and simply expect employees to use good computer judgment; 26 percent have a security policy they don’t enforce.

“Security needs to be more than a written document that you file and forget,” Ireland said. “It should be a crucial safeguard that’s integrated into every aspect of your business.”

Researchers surveyed 145 professionals responsible for IT security in small to mid-size businesses.

Leave a Reply

You must be logged in to post a comment.