Form page 3

Secure and Protect

Strengthen Facilities

Facility Assessment

Document the conditions in and around your work areas. This can include familiarizing yourself with the performance code of your building. Secure items that could tip, fall, or break during an earthquake. Collect floorplans of gas, water, electric, etc.

For Rental Spaces

Review your contract and determine terms for post-disaster building access, roles and responsibilities, retrofits, and more. Include a due diligence process when considering new leased spaces – look at vulnerabilities and negotiate favorable terms with landlord during lease discussion.

Safeguard Data and Vital Documents

Backup Data

Store backup copies of all vital records at a secure but accessible offsite location. This could include utilizing tapes, cartridges, USB drives, or accessing cloud storage. Documents should include your business resiliency plan and anything else needed to support recovery efforts.

Tip: Depending on where and how you store your backup data, make sure to also know what the data retrieval process looks like and how long it will take.

NIST Small Business CyberSecurity Corner

The NIST Small Business CyberSecurity Corner
Cybersecurity basics, guidance, solutions, and training to protect your information and manage your cybersecurity risks. Time estimate: varies depending on the size and complexity of the organization.

NIST Cybersecurity QuickStart Guide

The NIST Cybersecurity QuickStart Guide

The NIST Cybersecurity Framework can help an organization begin or improve its cybersecurity program. Built off of practices that are known to be effective, it can help organizations improve their cybersecurity posture. It fosters communication among both internal and external stakeholders about cybersecurity, and for larger organizations, helps to better integrate and align cybersecurity risk management with broader enterprise risk management processes. Time estimate: varies depending on the size and complexity of the organization.

Question to Consider

How often should your business be backing up your data?