E-Business
Developing a Disaster Recovery Plan for Small Businesses

Businesses need to plan for when disaster strikes. Whether it’s a fire, a major flood, or a cyberattack, there’s always a chance that something could happen that disrupts their operations.

This is particularly important for small businesses. Available data suggest that between 40% and 60% of SMEs without a set response plan for a major disaster will shut down permanently when that disaster happens.
Organizations that want to recover quickly from these events should have a Disaster Recovery plan in place. Such a plan enables them to cope, and bounce back within the shortest possible time.
What Is a Disaster Recovery Plan?
A Disaster Recovery (DR) plan is a document that’s created by an organization, detailing the steps it will take to ensure that it quickly resumes work in the event of a natural or man-made disaster.
The principal aim of such a plan is to ensure the recovery or continuity of vital organizational infrastructure, including IT systems. Unless these resources are brought back to functionality, the affected business will struggle—and fail –to run normally and serve its customers.
A critical part of the Disaster Recovery process is safeguarding or replicating data that may otherwise be lost when a disaster strikes. In the past, this involved a lot of physical work, from recalling data stored in hard drives to setting up IT infrastructure in a physical location, getting support staff to conduct maintenance, and engaging security to protect the facility.
These steps are costly and time-consuming. But today, businesses can bypass these processes by leveraging cloud Disaster Recovery.
Cloud Disaster Recovery: The Basics
Cloud Disaster Recovery works because it involves recalling and using data and applications that have been backed up in the cloud.
If the cloud is supported by infrastructure located on a different site from where the disaster struck, it will enable the organization involved to resume its workloads within a few hours or even minutes of the disruption occurring.
There are three approaches to cloud Disaster Recovery (DR): cold DR, warm DR, and hot DR.
Cold DR is the simplest of the three approaches—it just involves storing data or virtual machine (VM) images. But its recovery process is the most time-consuming of the lot, as users will have to download the stored data when a disruption happens—a process that may take a long while to complete.
In Warm DR, data and applications are duplicated, and these duplicates are stored with a cloud DR provider. They are also updated to conform to the originals. When a disruption happens, they can be accessed from the DR provider on a virtual machine (VM). This may take just a short while, but there’s still some downtime experienced.
In Hot DR, both the primary data and the DR site are running simultaneously. When there’s a disruption to the former, the latter remains active, and work can continue on it without any downtimes. This provides the quickest resolutions of the three alternatives, but it’s also the most expensive of them.
Besides the time savings that come with cloud DR, there’s also the benefit of backing up data in multiple locations, the ease with which cloud DR can be implemented, and the fact that it’s scalable.
Creating a Cloud Disaster Recovery Plan: The First Steps
Although cloud-based Disaster Recovery planning is often thought of as the preserve of large companies, small businesses are apt to develop a DR plan that will work for them. As has already been noted, it will protect them from a lot of losses, and strengthen their push for business continuity.
The first step to take in creating a Disaster Recovery Plan is to assess existing IT infrastructure. Things to note include their specifications, quantities, how much each asset is worth, and where they are stored. It’s also important to note possible risks to them, whether this is prolonged power outages, natural disasters, or cyberattacks.
Next, businesses will want to analyze the possible impact that a disaster could have on their operations. Two things have to be considered here.
First, the Recovery Time Objective (RTO), which is the upper time limit for when operations have to be restarted or else the business would begin to be negatively affected. There’s also the Recovery Point Objective (RPO), which is the maximum amount of time a business can bear data loss due to a crisis.
The smaller the RTO and RPO are, the more significant the effects of a disaster on the business tend to be.
After ascertaining what the RTO and RPO are, the business may proceed to create a DR plan based on them. For example, if these indices are much shorter, the organization in question can plan around having a Hot DR approach. But if these indices are longer, they could settle for a warm DR or even a cold DR.
Getting Expert Help: Disaster Recovery as a Service (DRaaS)
Often, a Disaster Recovery plan will have to include working with a vendor that provides Disaster Recovery as a Service (DRaaS). They could help with the next stages of the cloud DR plan, including building cloud DR infrastructure and putting the Disaster Recovery plan on paper.
A good deal of the planning process remains the responsibility of small businesses. For example, they will have to test their plan often to ensure that it works well. This may be done quarterly.
Yet, DRaaS providers play a key role. Working along with these vendors, smaller organizations can design a plan that’s suited for them, and their plan with minimal hiccups.
When choosing a DRaaS partner, SMEs will want to go for one that’s reliable, provides service that scores high on usability and scalability, and makes setup and recovery as easy as possible. These factors are crucial for making DR plans a success.
Layer3Cloud takes care of these concerns with its DRaaS offering. Its product guarantees the restoration of service within minutes, the limitation of outages, and the security of virtual operating environments. It’s flexible and scalable and assures users of significant geo-redundancy.
Let’s help you protect your business’s IT assets from disaster. Get in touch with our consultants here.
E-Business
Elon Musk Seeks $134Bn from OpenAI, Microsoft for ‘Wrongful Gains’

Elon Musk, billionaire Tesla owner, has asked a United States (US) federal court to award him up to $134 billion in damages from OpenAI and Microsoft, stating that the companies earned “wrongful gains” from his early support of the artificial intelligence startup.

Elon Musk,
This is according to a court filing, reported by Reuters.
In filings ahead of a trial expected to start in April in Oakland, California, Musk stated that OpenAI benefited between $65.5 billion and $109.4 billion from his contributions when he helped co-found the organisation in 2015, and Microsoft gained between $13.3 billion and $25.1 billion through its involvement.
He has asked a United States (US) federal court to award him up to $134 billion in damages from OpenAI and Microsoft, stating that the companies earned “wrongful gains” from his early support of the artificial intelligence startup.
This is according to a court filing, reported by Reuters.
In filings ahead of a trial expected to start in April in Oakland, California, Musk stated that OpenAI benefited between $65.5 billion and $109.4 billion from his contributions when he helped co-found the organisation in 2015, and Microsoft gained between $13.3 billion and $25.1 billion through its involvement.
Musk’s legal team argues that his early financial and strategic contributions, including approximately $38 million in seed funding, the recruitment of key personnel, and assistance in connecting founders with contacts, laid the foundation for the later success of OpenAI and Microsoft’s commercial AI efforts.
“Without Elon Musk, there’d be no OpenAI. He provided the bulk of the seed funding, lent his reputation, and taught them all he knew about scaling a business. A pre-eminent expert quantified the value of that,” Musk’s lead trial lawyer Steven Molo told Reuters.
“Just as an early investor in a startup company may realise gains many orders of magnitude greater than the investor’s initial investment, the wrongful gains that OpenAI and Microsoft have earned—and which Mr Musk is now entitled to disgorge—are much larger than Mr Musk’s initial contributions,” the filing said.
Musk, who left OpenAI’s board in 2018 and now leads AI company xAI, alleges that OpenAI violated its founding non-profit mission when it restructured to include a for-profit arm tied to Microsoft’s investment and commercial strategy.
Meanwhile, OpenAI has labelled the lawsuit “baseless” and part of a “harassment campaign” by Musk, and Microsoft’s legal team has said there is no evidence the company “aided and abetted” OpenAI in any wrongdoing.
Both companies have asked the judge to limit what Musk’s expert witness may present at trial, arguing that the damages calculations are unreliable and could mislead a jury.
According to Reuters, Musk’s filing says he may pursue punitive damages and other penalties, including a possible injunction, if the jury finds the companies liable, though it did not specify what form any injunction would take.
E-Business
Nigeria Targeted with 4,622 Cyber-attacks Per Week in December 2025

In December 2025, organisations globally faced sustained cyber pressure, as the average number of cyber-attacks per organisation per week reached 2 027, a 1% increase from the previous month and a 9% increase from December 2024.

This is according to December 2025 Global Cyber Attack Statistics by Check Point Research, the threat intelligence arm of Check Point Software Technologies.
According to the statistics, Latin America was the hardest hit, with companies experiencing an average of 3 065 cyber-attacks per week, a 26% year-over-year increase.
In contrast, Africa saw a decline in attacks, with Nigeria (4 622 attacks per week) and Angola (4 002 attacks per week) being the most targeted countries on the continent.
The report’s findings highlight the evolving cyber threat landscape, with ransomware and GenAI-driven data risks posing significant challenges to companies worldwide.
Ransomware attacks jumped 60% year over year, with 945 publicly reported incidents in December. Qilin was the most active ransomware operator, responsible for 18% of publicly disclosed attacks.
“Ransomware continues to scale through industrialised operations, while unmanaged GenAI usage is creating widespread data exposure at enterprise level,” said Omer Dembinsky, data research manager at Check Point Research.
The report noted the education sector was the most targeted industry globally, with 4 349 cyber attacks per week; followed by government (2 666 attacks per week); and associations and non-profits (2 509 attacks per week).
The widespread adoption of GenAI tools has introduced new cyber security risks, with one in 27 GenAI prompts posing a high risk of sensitive data leakage.
Experts warn that companies must prioritise prevention-first security, real-time AI threat intelligence and strong governance over AI tools to mitigate these risks.
Hendrik de Bruin, head of security consulting at Check Point Software, added: “Strengthening ransomware resilience, deploying AI-powered prevention and enforcing clear GenAI governance will be critical to reducing cyber risk in the year ahead.”
E-Business
Half of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise

Among the primary reasons for establishing a Security Operations Center (SOC) are strengthening cybersecurity posture, enabling faster detection and response and gaining a competitive edge.

Interestingly, despite the increasing demand for automated cybersecurity solutions, businesses rely on skilled security professionals to make key decisions, as human expertise remains essential for effective security management.
A Security Operations Center (SOC) is a dedicated organisational unit responsible for continuous monitoring and safeguarding of a company’s IT infrastructure. Its core mission is to proactively detect, analyse and respond to cybersecurity threats.
To identify the main drivers, strategic priorities, and potential challenges in SOC planning and implementation, Kaspersky has conducted a comprehensive global study involving senior IT security specialists, managers and directors from companies with 500 or more employees.
All participants operate without a SOC but have plans to establish one in the near future. The study spans 16 countries across APAC, META, LATAM, Europe, and Russia, providing valuable insights into the emerging trends and best practices in SOC development worldwide.
The findings of the research reveal that 50% of companies intend to establish SOCs to strengthen their cybersecurity posture, and 45% are motivated by the need to address increasingly sophisticated and dangerous threats.
Other drivers include budget optimisation, the necessity for faster detection and response, and the expansion of software, endpoints and user devices – factors that demand more comprehensive and layered security measures.
These are cited by 41% of organisations. Additionally, 40% seek better protection of confidential information, 39% aim to meet regulatory requirements and one-third (33%) expect SOC capabilities to provide a competitive edge. Larger enterprises tend to cite each of these reasons more often, reflecting the broader operational and regulatory pressures they experience.
Continuous monitoring becomes the leading SOC requirement
Among the key functions organisations plan to delegate, 24/7 security monitoring leads at 54%. This around-the-clock vigilance enables early detection of anomalies, prevents escalation and sustains cyber resilience in real-time. This demand highlights a strategic requirement for proactive risk management, as organisations aim to defend against persistent threats that can strike at any moment.
Companies intending to fully outsource SOC operations show a stronger interest in applying “lessons learned” methodologies, whereas those developing internal SOCs focus more on access management to maintain tighter control.
Human expertise drives SOC technology choices
While SOCs use advanced technology, the choices made by organisations show that human analysts are very important. Among the solutions that organisations plan to include in SOC are – Threat Intelligence Platforms (48%), Endpoint Detection and Response (42%) and Security Information and Event Management systems (40%) – sophisticated solutions that automate data collection and reduce operational load, however, they depend heavily on skilled security professionals who provide critical context, interpret complex findings and make final decisions when guiding appropriate responses.
Other solutions chosen include Extended Detection and Response (38%), Network Detection and Response (37%) and Managed Detection and Response (33%). Large enterprises tend to adopt more technologies (5.5 per SOC on average), while smaller ones integrate fewer (3.8).
“To successfully build a SOC, companies must prioritise not only the right mix of technology but also the careful planning of processes, clear goal-setting and effective resource distribution.
“Well-defined workflows and continuous improvement are essential to ensure that human analysts can focus on critical tasks, making the SOC a proactive and adaptable component of their cybersecurity strategy,” comments Roman Nazarov, Head of SOC Consulting at Kaspersky.
E-Financial3 days agoSEC Hikes Minimum Capital Requirements for Market Operators After a Decade
News3 days agoNigeria Off EU High-Risk Money Laundering List in Major Financial Win
Telecom3 days agoStudy Shows Blocks in Telegram are Pushing the Underground Out
News3 days agoNGX Unveils Net-Zero Plan for Greener Capital Market
Telecom3 days agoGalaxy Backbone Marks Two Decades of Powering Nigeria’s Digital Evolution
Telecom3 days agoVodacom Crowned Africa’s Top Employer 3rd Year Running on Innovation, Ethical AI
Telecom3 days agoGalaxy Backbone Marks 20 Years, Tops FG Website Scorecard
E-Financial17 hours agoHere Are Nigerian Banks That Have Secured Their Licences



















