Business continuity and IT recovery planning for small business
A backup alone does not keep a business operating during a serious outage or cyber incident. A continuity plan identifies the people, communications, systems and processes the business needs first, then sets out how they can keep operating while normal systems are unavailable or being restored.
Last updated
The short answer
Start by identifying the business functions that cannot stop, the systems and contacts they depend on, and the minimum workable way to continue if those systems are unavailable. Assign decision-makers, document communications and recovery priorities, then test the plan before an incident forces you to use it.
What the plan should do
A business continuity plan covers how the business continues its critical work during disruption. IT recovery is one part of that plan: restoring or replacing the systems, data and communications needed to support those critical functions. The plan must reflect the business's real priorities and be reviewed when those priorities change.
The decisions to make
Critical functions first
Identify what must continue: customer contact, payments, appointments, safety, core records, operational systems or supplier coordination.
Minimum workable tools
Decide how the business will communicate and complete essential work if normal email, devices, systems or premises are unavailable.
Recovery priorities
Set the order for restoring services based on business impact, not on which system is easiest to rebuild.
Named roles and contacts
Record who can make decisions, contact suppliers, approve spending, communicate with customers and coordinate technical recovery.
Tested assumptions
Walk through a realistic disruption and correct the gaps before the plan is needed under pressure.
Who this is for
- Small businesses reliant on email, cloud systems, payments or line-of-business software.
- Teams that have backups but no documented recovery priorities.
- Businesses preparing for cyber risk, insurance, a major move or supplier change.
- Owners who need a practical plan rather than a large compliance document.
A practical planning sequence
- Map what matters most. List critical functions, systems, data, suppliers and people, then define the cost of each being unavailable.
- Choose continuity options. Define a minimum workable process for communications and each critical function while normal systems are unavailable.
- Set recovery objectives. Agree what must be restored first and what level of data loss or delay the business can tolerate for each system.
- Document roles and contacts. Keep the plan accessible to authorised people even if normal business systems are unavailable.
- Exercise and update it. Test a realistic scenario, record findings and update the plan after material business or technology changes.
How WaTo can help
- We link continuity planning to your actual systems, people and operating priorities.
- We assess backups, recovery processes, communications and third-party dependencies together.
- We keep the plan practical enough to use during a real disruption.
- We can help test the assumptions and record the improvements.
- We provide Adelaide-based support and Australia-wide remote assistance.
Business continuity questions
Is a backup the same thing as a continuity plan?
No. A backup is one recovery control. A continuity plan also covers priorities, people, communications, alternative ways of working and decisions during disruption.
How often should we test the plan?
Test it after material changes and on a regular schedule. A simple scenario exercise is better than a plan that is never opened.
Do small businesses need a formal plan?
The level of formality should match the business, but every business benefits from documented critical systems, contacts, recovery priorities and a way to keep essential work moving.
How WaTo can help with this
Sources & references
WaTo Consulting. Last reviewed 2026-10-04. Review after material system, supplier or business changes.
Want to know what would keep operating after an outage?
WaTo can help map the essentials, test the recovery assumptions and build a plan your team can use.
Mon to Fri, 8:30am to 5pm
