What the Ghana Digital Centre Flood Teaches SMEs About IT Continuity

1. Cloud backup is no longer optional

When laptops or office desktops are damaged by floodwater, fire, theft or power events, the device itself may be replaceable. The data on it may not be.

Important files should not live only on local machines. Critical data should be protected through platforms such as Microsoft 365, SharePoint, OneDrive, Google Workspace, Google Drive or a managed cloud backup service.

It is also important to understand that cloud storage and cloud backup are not always the same thing. Syncing files to the cloud is useful, but a proper backup approach should include retention, version history, deletion protection and restore testing.

• ✓Important business files are stored in Microsoft 365, Google Workspace, SharePoint, OneDrive, Google Drive or a managed backup platform.
• ✓Local-only files are identified and either moved to approved cloud storage or backed up automatically.
• ✓Backup retention is configured so accidental deletion, ransomware or account compromise does not immediately remove all recovery options.
• ✓Restore testing is performed at least quarterly, not only after something has gone wrong.
• ✓A named person or provider is responsible for checking backup success and reporting failures.

2. Endpoint encryption protects data when devices are lost or damaged

A flood can destroy equipment, but it can also create a data security problem. When laptops are damaged, moved, collected for repair, disposed of or handled by third parties, the question becomes: what data is still on those devices?

For businesses handling customer records, staff data, donor information, patient data, financial documents or confidential files, endpoint encryption is essential. On Windows this may mean BitLocker. On macOS it may mean FileVault.

• ✓All laptops and desktops are recorded in an asset register.
• ✓Devices are protected with full-disk encryption such as BitLocker for Windows or FileVault for macOS.
• ✓Antivirus or endpoint protection is installed and monitored.
• ✓Operating systems are supported, patched and not left running end-of-life software.
• ✓Lost, damaged or disposed-of devices follow a documented process.

3. Asset records make recovery faster

After a flood or similar incident, one of the first questions becomes: what exactly has been damaged? Many SMEs struggle here because asset records are incomplete, outdated or stored only in someone's head.

A simple asset register can make recovery faster, support replacement decisions and provide evidence for insurance claims.

• ✓Laptop and desktop serial numbers
• ✓Assigned user and device location
• ✓Purchase invoices and receipts
• ✓Warranty and supplier records
• ✓Photos of key equipment where useful
• ✓Backup reports and restore-test evidence
• ✓Incident notes and communication records

4. Insurance evidence should be prepared before an incident

Many businesses only think about insurance documentation after damage has occurred. By then, it may be difficult to gather the right evidence.

Good IT documentation can support insurance recovery. This includes asset registers, invoices, serial numbers, warranty records, photos of key equipment, backup reports and incident notes.

This does not guarantee that a claim will be accepted, but it gives the business a stronger position and reduces avoidable delays.

5. Emergency communications must be planned

When an office is inaccessible, communication becomes the business lifeline. Staff need to know whether to report to work, whether to work remotely, what systems are available and who to contact for support.

Clients need to know whether services are running, whether there may be delays and how they can reach the business.

• ✓Who sends the official staff update?
• ✓Which channel is used first: WhatsApp, SMS, email, Teams or phone?
• ✓Where is the staff contact list stored, and can it be accessed outside the office?
• ✓Who contacts key clients and suppliers?
• ✓What is the fallback support channel if the office is closed?
• ✓Who updates the website, social media or public notice if required?

6. Business continuity is not only for large companies

Many SMEs assume business continuity planning is only for banks, telcos, multinationals or government agencies. That is no longer true.

A small business does not need a 100-page continuity plan, but it does need practical answers to common disruptions.

• ✓What if the office floods or becomes inaccessible?
• ✓What if laptops are stolen or damaged?
• ✓What if email is compromised?
• ✓What if the internet link fails?
• ✓What if the owner, administrator or key staff member is unavailable?
• ✓What if staff must work remotely for a week?

A simple continuity checklist for Ghanaian SMEs

If you want to start small, begin with these five areas: data backup, endpoint protection, asset records, insurance evidence and emergency communications.

• ✓Confirm where critical files are stored and whether they are backed up.
• ✓Encrypt business laptops and require strong passwords or PINs.
• ✓Create an asset register with serial numbers, assigned users and purchase evidence.
• ✓Keep insurance documents, invoices and equipment photos somewhere accessible outside the office.
• ✓Prepare simple staff and client communication templates before an emergency happens.

Final thought

The Ghana Digital Centre flood is a reminder that technology risk is not always digital. Physical events can quickly become IT, data, financial and operational problems.

For Ghanaian SMEs, the lesson is not to panic. The lesson is to prepare calmly and practically: back up important data, encrypt devices, keep asset records, maintain insurance evidence and communicate clearly during disruption.