It's a Tuesday in February. The office manager's car is in the ditch on M-28. She's fine. She'll be back Thursday.
By nine o'clock nobody can find the folder with the vendor logins. By ten, whoever is covering the front desk has found the alarm code, because it was on a sticky note under the keyboard. Payroll is due Friday. Nobody knows how payroll actually runs, because it has always been her job and there was never a reason to write it down.
Nothing burned. Nothing was encrypted. The building is standing. The business is still in trouble.
That is the version of a bad day most owners have not planned for.
Your plan is a person
When a small business owner says "we'd figure it out," what they usually mean is that one specific person would figure it out. In a five to fifty person shop, that person is often the office manager, sometimes the bookkeeper, occasionally the owner. They hold the alarm code, the bank logins, the insurance agent's cell number, the way the invoicing software is set up, and the unwritten rule about which customer gets served first when the schedule collapses.
The U.S. Chamber of Commerce Foundation and Verizon released survey findings in May 2026 that put a number on the planning gap. Of 2,005 small business owners and decision makers, 69% had no disaster plan. And 94% believed they would recover from a disaster anyway. Those two answers sitting next to each other tell you something. Most people are counting on improvisation.
A backup protects your data. It does not tell a new person how to run Friday payroll, and it does not know which account the card processing settles into. Those are different problems, and only one of them gets any attention.
Three questions worth answering before anything happens
Who decides? During a real disruption, somebody has to authorize spending money, sending staff home, calling a vendor at whatever the emergency rate turns out to be, and telling a customer no. If the answer is "whoever's around," you will lose hours waiting for permission. Name a person, and name a backup for that person.
Who knows how? Pick the things the business cannot run without. Payroll. The alarm and the keys. The software you would close without. Bank and card processing. The phone number customers call. For each one, write down a second name. If the line is blank, that is your gap, and in a shop this size it is usually a bigger gap than an untested backup.
What comes back first? Order matters, and it is not obvious in the moment. Restoring everything at once is not possible and not especially useful. Decide in advance which two systems come back first, and write down the reason.
The test takes twenty minutes
Take a sheet of paper. Draw two columns. List those five things down the left side. Put a name in the first column and a second name in the right. Then ask the second person, out loud, whether they could do that job on a Wednesday morning with no help.
You will probably find at least one blank. That blank is the honest answer to "are we ready," and finding it on a quiet afternoon costs a lot less than finding it on the wrong one.
Put the sheet somewhere the building can't take with it
A plan that lives in one head, or in a binder on a shelf in the office, has the same failure mode as the thing it was written to survive. Keep a printed copy somewhere off site. Keep a copy you can reach from a phone. Tell two people where it is. Not the whole company. Two people, and one of them is not the owner.
The same Chamber survey found that 36% of small businesses could not pay employees beyond one month after a disaster. That is what this is really about. Not files. Not servers. Whether the crew gets paid on Friday while you sort out everything else.
You do not need a binder, a committee, or a new piece of software to close the worst of this. You need a sheet of paper with real names on it, and one honest conversation about who does what when the usual person is not there.
The backups and the restore tests still matter. They just are not the part that usually fails first.