A hurricane plan should protect people first, then preserve the information and systems the business needs to recover. The useful work happens before a watch or warning: document dependencies, test restoration, decide who has authority to shut down equipment, and make sure employees can reach the plan without the office network.
Weeks before hurricane season
- Inventory critical computers, servers, network equipment, cloud services, phones, vendors, and administrative accounts.
- Define the maximum tolerable outage for each important system and the most recent data the business can afford to lose.
- Maintain protected backups and test recovery of representative files and systems. A green dashboard is not a restore test.
- Document network settings, cloud tenants, licensing, warranty details, emergency contacts, and equipment photographs.
- Review cyber and property insurance requirements and know how to preserve evidence after a loss.
Protect data from both storms and ransomware
At least one recoverable copy should be isolated from ordinary user and administrator access. A continuously connected drive or synchronized folder can be altered by malware, mistakes, or a compromised account. Encrypt portable media, control backup credentials, and periodically restore files to a safe location.
Plan for power and connectivity failures
Use correctly sized uninterruptible power supplies for firewalls, switches, access points, servers, and other equipment that needs a controlled shutdown. A UPS is not a substitute for a generator and has a limited runtime. Test batteries and confirm which circuits have generator power.
If internet access is critical, evaluate a secondary circuit or cellular failover before the storm. Test whether essential applications, VPNs, multifactor authentication, and remote-support tools work through that backup path. Document data limits and who can authorize extended use.
Create a shutdown and evacuation checklist
- Back up and verify critical work earlier than the expected impact window.
- Shut down servers and workstations cleanly according to the recovery plan.
- Disconnect sensitive equipment from power and exposed copper network lines when it is safe and appropriate.
- Move portable equipment and backup media away from windows and flood-prone floors.
- Record what was shut down, what remains online, and who has keys or administrative access.
- Prioritize employee safety; equipment can be replaced.
Keep communications independent of one location
Maintain an employee contact tree and an out-of-band way to share status. Cloud email and document services can help, but only if users have working recovery methods and access from approved devices. For business-phone continuity and call routing, coordinate with your phone provider; PCC refers cloud-phone planning to Tier 1 Telecom.
After the storm
Do not energize wet or visibly damaged equipment. Photograph damage before moving items when safe, follow insurer instructions, and have questionable power and cabling inspected. Restore the most critical services in the documented order, verify security controls, and record gaps for the next revision of the plan.
Florida businesses can also use Florida Division of Emergency Management business resources when building the broader continuity plan.
Test the recovery plan before the forecast changes
PCC can help document systems, protect backups, review remote access, and turn a generic checklist into a practical technology recovery plan. Explore backup and disaster recovery.