Operational Resilience: Keeping the Business Running During Broadband, Power, or Cloud Outages.
At 9.15am on a February morning, a fibre cable was cut by a contractor working on a road upgrade outside a Letterkenny business park. Four businesses lost internet connectivity for eleven hours. One had a 4G backup router and was operational within eight minutes. The other three spent the day managing angry clients, rescheduling meetings, and processing orders on paper.
The 4G router cost €180. The lost productivity for each of the three businesses without one was estimated at several thousand euros each.
Broadband failure is not a cybersecurity threat. It is an operational resilience risk. So is a power cut, a cloud platform outage, or a local flooding event that prevents staff from reaching the office. The principle that governs all of these is the same: operational resilience is the ability to maintain minimum viable business operations when the infrastructure you depend on is unavailable.
What Is Operational Resilience?
Operational resilience is the capacity of a business to continue delivering its critical services when things go wrong — whether that is a cyberattack, a power cut, a supplier failure, or a natural disruption — by having planned alternatives to every critical dependency.
It is the broader context within which cybersecurity sits. A business that can recover from ransomware in 24 hours because it has tested backups is operationally resilient. A business that cannot operate without its broadband connection because all its phone calls, payments, and order processing go through cloud systems with no alternative is operationally fragile — regardless of how good its cybersecurity is.
The Most Common Operational Vulnerabilities in Irish SMEs
Broadband as a single point of failure. Most Irish SMEs rely on a single broadband connection with no backup. When that connection fails, cloud platforms are inaccessible, VOIP phones stop working, card payments cannot be processed, and cloud-based point-of-sale systems go offline. A 4G mobile broadband router — configured in advance to provide backup connectivity — costs under €200 and solves this entirely for most small businesses.
Single cloud platform dependency. If your business operations depend entirely on Microsoft 365 and Microsoft experiences a significant outage — as it has, notably, on several occasions in recent years — you have no alternative. The mitigation is knowing what you will do: which tasks can be deferred, which can be done with local tools, and what the manual workaround looks like for each critical process.
No offline access to critical contacts. If your CRM is cloud-based and the cloud is down, do you have access to the contact details for your ten most important clients? If your VOIP system is down, do you have a list of mobile numbers for key staff? This information, printed and physically accessible, is one of the cheapest resilience investments available.
Power without UPS. An uninterruptible power supply on your server, your router, and your network switch allows those systems to remain operational during brief power cuts — long enough to save open work and shut down gracefully. For businesses whose operations are entirely cloud-based, a UPS on the router may be more important than one on the server.
Single-site operations. A business whose entire operation — staff, servers, systems — is in one building has no resilience against events that make that building inaccessible. Remote working capability, even basic capability, provides a degree of geographic resilience.
If your broadband connection failed right now, what would stop working first? The answer to that question identifies your most critical single point of failure. Book a free 20-minute strategy call — operational resilience reviews often surface gaps that businesses had not considered.
The Cloud Outage Problem
Irish SMEs have moved significant operations to cloud platforms over the past decade — email, file storage, CRM, accounting, HR, point-of-sale, telephony. The reliability of major cloud platforms is generally excellent. But excellence is not perfection, and even 99.9% uptime means approximately 9 hours of downtime per year.
When a cloud platform experiences an outage, every business that depends on it is affected simultaneously. Your IT provider cannot fix it — it is outside their control. Your resilience depends entirely on your having planned alternatives in advance.
For each critical cloud platform your business uses, the resilience question is: what is the minimum alternative if this is unavailable for four hours? For eight hours? For 24 hours? The answers become your cloud outage response: a manual process, a cached local copy, a fallback tool, or an explicit decision that this function is deferred until the platform recovers.
Why This Matters to Your Business Right Now
NIS2 Article 21 includes business continuity measures as a required risk management control, explicitly referencing backup management and disaster recovery [^1]. For Irish businesses in regulated sectors and their supply chains, operational resilience is a compliance requirement. For all Irish businesses, it is an economic one.
The cost of planning for resilience is consistently lower than the cost of an unplanned outage. A 4G backup router, a printed contact list, a documented manual workaround for each critical process, and a UPS on the router can be implemented for under €500 in total investment. The cost of a day's unplanned downtime almost always exceeds that figure.
What Next
Map your critical dependencies. List every system, service, or connection your business relies on to operate. For each one, note what happens if it is unavailable and whether an alternative exists.
Address the broadband single point of failure. If your business has no backup connectivity, a 4G mobile broadband router configured and ready to use is the highest-return resilience investment most Irish SMEs can make. Configure and test it before you need it.
Create a one-page outage guide. For each critical system, document the manual alternative and post it somewhere physical. When the systems are down is not the time to design the workaround.
Ready to find out exactly where your business stands? Book a free 20-minute strategy call with our vCISO team at www.pragmaticsecurity.ie/book-a-call. No sales pitch. No jargon. Just clarity on your cyber risk — and a clear plan to address it.
Related Reading
- How to Build a Simple, Tested Business Continuity Plan That Non-Technical Staff Can Use
- What Would One Week of IT Outage Actually Cost Your Business?
- Building Financial Resilience to Cyber Incidents
[^1]: NCSC Ireland — NIS2 Business Continuity Guidance [^2]: An Garda Síochána — National Cyber Crime Bureau [^3]: Data Protection Commission Ireland
Pragmatic Security — Cybersecurity advisory for Irish businesses. Based in Donegal, Ireland. CISA, CISSP, CISM certified advisors.
