Here’s the uncomfortable truth: a surprising number of small and mid-sized businesses that suffer a major data loss or extended systems outage never fully recover. It’s not usually the disaster itself that sinks a company. It’s not having a plan for what to do afterward.

A few examples of what “unprepared” can look like:

• A ransomware attack locks up your files, and you have no backup to restore from.
• A storm knocks out power to your office for three days, and your team has no way to keep working remotely.
• An employee’s laptop is lost or stolen, and there’s no way to know what data was on it or how to lock it down.
• A server fails, and the person who knew how to fix it left the company two years ago.

None of these require a headline-worthy disaster. They’re everyday risks that any business can run into.

You don’t need to overhaul everything at once. Preparedness works best as a handful of concrete steps, not a giant project that never gets finished.

1. Know what you’d lose. Make a simple list of what your business depends on to function: your data, your software, your equipment, your internet connection, your key people. This tells you what actually needs protecting.
2. Back up your data, and check that it works. A backup you’ve never tested is a backup you can’t count on. Make sure your data is backed up somewhere separate from your main systems, and actually try restoring from it at least once a year.
3. Write down your plan, even a short one. Who do employees contact if the office is unreachable? Who’s authorized to make decisions if the owner or manager can’t be reached? Where can the team access files if the building is closed? A one-page plan beats no plan.
4. Protect against the everyday disaster: cyberattacks. Ransomware and phishing attacks put more businesses out of commission every year than fires or floods do. Basic protections, like keeping software updated, using multi-factor authentication, and training your team to spot suspicious emails, go a long way.
5. Talk to your team. A plan that lives only in your head doesn’t help anyone if you’re not available. Make sure at least one other person knows where the plan is and what it says.
6. Review it once a year. Preparedness isn’t a one-time task. Set a yearly reminder, National Preparedness Month is a natural one, to review and update your plan as your business changes.

Traditional emergency planning tends to focus on people and physical safety, which is exactly where it should start. But for most businesses today, getting back up and running also means getting your systems and data back. That’s where a lot of preparedness plans fall short: they cover the fire drill, but not the data recovery plan.

At Tech River, we help businesses build the IT side of their preparedness plan: reliable backups, secure remote access, and monitoring that catches problems before they become disasters. It’s the same principle behind the NIST-based security programs we build for clients. Do the groundwork before you need it, so you’re not figuring it out in the middle of a crisis.

What is National Preparedness Month? It’s a nationwide campaign held every September, led by FEMA, encouraging individuals, families, and organizations to prepare for emergencies. It’s been observed since 2004.

What is the 2026 National Preparedness Month theme? The 2026 theme is “Americans Stand Ready,” focused on individuals and organizations taking responsibility for their own readiness to make communities more resilient overall.

Does National Preparedness Month apply to businesses, or just households? Both. FEMA’s guidance is written for individuals and families, but the same planning principles, know your risks, build a plan, keep supplies and backups ready, stay informed, apply directly to businesses.

What’s the most common gap in business preparedness plans? IT and data recovery. Many businesses have a plan for physical safety but no tested backup process or plan for restoring systems after an outage or cyberattack.

Where should a business start with preparedness? Start small: back up your data and test the restore, write down a one-page emergency plan, and make sure more than one person knows where it is.

Tech River helps businesses build IT systems that hold up when things go wrong, from tested backups to secure remote access. If you’d like help reviewing where your business stands.