This whitepaper is a comprehensive document that emphasises the importance for small businesses to have a basic plan in place to respond to various potential disaster situations. It highlights the significance of including cybersecurity issues caused by cybercriminals in these plans. The document provides insights on testing business continuity and disaster recovery separately, developing technical recovery plans, and prioritizing and preparing for different disaster scenarios. It also emphasizes the need for effective communication throughout the recovery process.