On the night of July 3, thunderstorms tore across New Jersey with wind gusts near 70 mph. At the peak, nearly 250,000 homes and businesses were in the dark — and by the time the multi-day stretch of storms wound down, state utility regulators had overseen restoration work on roughly 500,000 outages statewide. It happened in the middle of a record heat wave: Atlantic City hit 106°F on July 4, tying its all-time high. Utility crews worked 16-hour shifts through a near-100-degree heat index, replaced more than 165 broken utility poles, and some customers waited nearly a week for the lights to come back on.
If your business was in the dark that weekend, you already know the real cost wasn’t the electric bill. It was the missed client calls, the server that wouldn’t boot back up, and the staff who couldn’t work from home because nothing was set up for it.
Here’s the part most owners don’t realize: if you’re a law firm, medical practice, or financial firm, a written plan for exactly this situation isn’t optional. Your regulators already expect one.
Your Regulators Already Require a Continuity Plan
Different industries call it different names, but the requirement is the same: you must be able to protect and recover your data when something goes wrong.
- Medical practices: The HIPAA Security Rule requires a contingency plan — a data backup plan, a disaster recovery plan, and an emergency mode operation plan. In plain English: how you keep patient data safe and keep operating when the power’s out.
- Financial and investment firms: FINRA Rule 4370 requires a written business continuity plan that’s reviewed annually and updated whenever a material change occurs.
- CPA firms, dealerships, and lenders: The FTC Safeguards Rule requires a written incident response plan and safeguards that keep customer information available and protected.
- Everyone with cyber insurance: Carriers increasingly ask about backups and continuity planning at renewal time. Weak answers mean higher premiums — or denied claims.
“Contingency plan” just means writing down how your business keeps running — and how your data survives — when the lights go out. A storm is the test. The plan is the answer key.
The Outage-Readiness Checklist
You don’t need a generator the size of a shed. Most 20–50 person businesses can get outage-ready with seven practical steps:
-
Put a UPS on anything that matters
A UPS (uninterruptible power supply — a battery that kicks in instantly) buys your server and network gear enough time to shut down safely. Hard crashes during an outage are how servers get corrupted.
-
Set up automatic safe shutdown
The UPS should tell your server to power down cleanly before the battery runs out. If someone has to run to the office at 11 PM to do it by hand, it isn’t a plan.
-
Add backup internet
A 4G/5G failover device keeps phones, payments, and cloud apps alive when your main line drops. For many businesses this costs less per month than one lost billable hour. We covered exactly what a proper failover setup looks like in our backup internet guide.
-
Follow the 3-2-1 backup rule
Three copies of your data, on two different types of storage, with one copy off-site or in the cloud. A backup sitting next to the server it protects doesn’t count.
-
Test a restore — don’t just check the backup ran
The worst time to learn your backup is broken is during a recovery. Restore a real file from last week and confirm it opens.
-
Make remote work ready before you need it
If your files and phones live in the cloud, a powerless office is an inconvenience, not a shutdown. Confirm every employee can actually sign in from home — today, not during the next storm.
-
Write a one-page communication plan
Who texts the team? Who updates clients? What does your voicemail say? Decide now, while the answer doesn’t matter.
Why New Jersey Businesses Face Higher Outage Risk
This isn’t a once-a-decade problem here. Between summer thunderstorms, nor’easters, high winds, flooding, and extreme heat, New Jersey businesses face an ongoing risk of power and internet disruptions. The businesses that came through the July 3 storm without losing a beat weren’t lucky — they had battery backup, cloud files, and a failover plan that had already been tested.
What Outage Readiness Costs (Less Than You Think)
A quality UPS for a small server closet, a cellular failover device, and managed cloud backup together typically run a few hundred dollars a month as part of a flat-fee managed plan — a fraction of what one lost day costs a 20-person firm. And because it’s the same equipment your compliance framework expects, you’re checking a regulatory box and a resilience box with one investment.
The Storm Was the Test. How Did You Score?
If the July 3 storm exposed gaps — a server that crashed hard, staff who couldn’t work, a backup nobody had ever tested — that’s not a failure. It’s a free audit. The mistake would be ignoring what it told you before the next storm rolls in.
Frequently Asked Questions
Does HIPAA require a disaster recovery plan?
Yes. The HIPAA Security Rule’s contingency plan standard requires a data backup plan, a disaster recovery plan, and an emergency mode operation plan — written and ready before an outage or disaster hits, so patient data stays protected and the practice can keep operating.
What is the 3-2-1 backup rule?
Keep three copies of your data, on two different types of storage, with one copy off-site or in the cloud. It’s the baseline standard regulators and cyber insurance carriers expect — and it’s what lets a business recover when hardware is damaged in a storm or outage.
Does cyber insurance require a business continuity plan?
Increasingly, yes. Carriers now ask detailed questions about backups, recovery testing, and continuity planning at application and renewal time. Weak answers lead to higher premiums, added exclusions, or denied claims after an incident.
How much does outage readiness cost a small business?
For a typical 20–50 person firm, a quality UPS, cellular internet failover, and managed cloud backup usually run a few hundred dollars per month as part of a flat-fee managed IT plan — far less than the cost of a single lost business day.