Cloud Accounting Practice Management

You May Have a Disaster Plan, But What About Business Continuity Planning?


IT strategy and tactics should align with business strategy and tactics. If you have made a plan for IT to support the business, you should have scheduled replacements for hardware and software. You should also have support and training for your people. It doesn’t matter if people are digital natives, if everything is in the cloud, or if your needs are simple. You need a road map for what should be done to support IT needs, and have daily, weekly, monthly, quarterly, and annual tasks that you perform.

We are amazed at the number of companies that are simply reactive to IT needs and failures, thinking that this is the least costly way to operate. Again, think about your down-time costs. How much does it cost your organization per hour when staff can’t work? What factors are beyond your control where you can take actions to prevent outages?

Let’s illustrate this approach to planning with one simple safety net approach. Let’s say you are hosting QuickBooks from one of the many reputable hosting providers. How difficult would it be for you to have a local weekly or monthly backup of every QuickBooks file that is hosted? Note that if communication lines don’t work or the hosting company has an infection and can’t operate for a period of time, having a copy of the QuickBooks file could allow you to continue to operate, run a payroll, or perform some other mission critical task. Doesn’t this safety net seem worthwhile?

Note the thinking: Plan to be self-sufficient!


We mitigate risk by purchasing insurance. When was the last time you reviewed your overall insurance strategy? Today, businesses need insurance for CyberSecurity breaches, business continuity, theft, and large-scale disasters. What is included or excluded in your current policies? What documentation is needed to file claims? Should you have a current hardware and software list? Can your rates be lowered by taking certain actions? Do you have enough coverage? With today’s risks, Cyber Insurance is no longer optional.

Note the thinking: Review your insurance coverage before you need it!


Oh, la, la! Training of users is frequently ignored as too expensive or too ineffective. But you can fix that! Determine the topics that need to be covered with your users. We know time is wasted in the productivity applications of email, spreadsheets, and word processing — as well as in vertical accounting applications. Consider other topics such as security, incident response, and business continuity. What about business development, client service, and other mission-critical areas? If you start a training program, you’ll realize quickly that ignorance costs and training pays!

Note the thinking: Training done right always pays!

Key Takeaways

You have probably noted that there is no “silver bullet” for business continuity. The closest thing to a silver bullet is the backup appliance noted above. Some people believe that cloud computing is a silver bullet, but based on the costs and performance for most organizations, it seems more like a gold bullet. Cloud computing can certainly help with business continuity, but it is rarely the lowest cost approach, it is not always reliable, and rarely is it the fastest option available. Furthermore, when there is a failure, you have no control on remediation or recovery.

Your business continuity plan should include what to do with your people when no work can be completed on computers. In other words, how do you operate on full manual procedures?

Our thinking on business continuity is that you should have a plan that makes your business operational in less than 15 minutes, and that you should have performed enough planning that the emergency remediation is largely under your control. If the situation is particularly bad, you may have to declare a disaster and put your disaster plan into full use. However, for day-to-day business continuity needs, you should be able to operate without anyone from the outside being able to determine that you are having operational issues. If you can continue running, no matter what, you will have a handle on business continuity.

Note: Have you had any down time in the past year? Have you taken any action to make sure that doesn’t happen again? If your firm needs guidance on business continuity, Accountex can connect you with resources to help you make the right decisions.

About the author

Randy Johnston

Randolph P. (Randy) Johnston, MCS has been a top rated speaker in the technology industry for over 40 years. He was inducted into the Accounting Hall of Fame in 2011. He was selected as a Top 25 Thought Leader in Accounting from 2011-2018. His influence throughout the accounting industry is highlighted once again this year by being a recipient of the 2017 Accounting Today Top 100 Most Influential People in Accounting award for the 14th consecutive year. Among his many other awards he holds the honor of being one of nine technology stars in the U.S. by Accounting Technology Magazine. Randy writes a monthly column for The CPA Practice Advisor, articles for the Journal of Accountancy, and creates articles for both accounting and technology publications, as well as being the author of numerous books. He has started and owns multiple businesses including K2 Enterprises in Hammond, Louisiana and Network Management Group, Inc. (NMGI) in Hutchinson, Kansas. NMGI has supported CPA firms for 30+ years and is the largest managed service provider serving the CPA profession in North America. His wife and four children enjoy many experiences together including theatre, music, travel, golf, skiing, snorkeling and model trains. Randy's experience as a college instructor, management and technology consultant, and advisor to the profession will be obvious to attendees at his conference presentations.


  • Outstanding article, Randy! All too often I find that a business that has a disaster recovery plan doesn’t have a business continuity plan. We saw this with the recent Cloud 9 problem. The hosting company had backups, and those were secure. They were restored, and nothing was lost. But for some businesses, they were without service (and access to their QuickBooks files) for up to a week. A disaster was prevented, but there was a major business continuity problem. If those businesses had made their own QB backup file and had it stored somewhere off of the hosted system, they would have been able to restore a copy to a local computer running QB, and would have been able to continue their business operations during the outage.

Leave a Comment