A Cyber Recovery Plan Might Help Small Wellbeing Practices Bounce Back Faster

The Enterprise Research Centre's 2025 look at British small businesses claims that firms with a written cyber continuity plan, plus a backup that isn't just sitting in the cloud, recover faster after an incident, and this includes practices like yours.

Practices holding bookings, health records or payment details face the same recovery odds as any other small firm, and this claim suggests a bit of paperwork changes those odds.

Original ResearchSmall firms with a documented cyber recovery plan, and those keeping a backup outside the cloud, reportedly get back on their feet faster after a breach.
Sourcehttps://www.enterpriseresearch.ac.uk/our-work/publications/
OverviewThe claim sits inside a wider survey of small business conditions from an academic research centre, though the page currently linked is just a list of publications, not the report itself.
Year2025
PublisherAcademic, Enterprise Research Centre
Relevance to WellbeingRelevant to any practice storing client data, though the stat itself cannot currently be checked against the original report or its method.
Our VerdictToo early to tell it's repeated confidently but nobody has shown their working, so treat it as sensible-sounding rather than proven.
Our Summary
  • The advice is cheap and dull enough not to matter much even if the underlying study never turns up.
  • It lines up with ordinary IT advice given elsewhere, so it's unlikely to be wrong even if unproven.
  • The linked page lists reports rather than showing one, so there's no sample size, method or figures to inspect.
  • No named survey or author sits behind the sentence, which puts it closer to an agency claim than a finding.
Our Geo ViewApplies broadly to all countries, though the survey behind it, where it exists, appears to cover UK small businesses only.
Abstract of wellbeing niches and revenue flow
Recognise how this might impact your practice

Why this might matter to you

  • Coaching: this matters because client notes and payment details often live on one laptop, and a plan for getting back online counts for more than the laptop's warranty.
  • Therapy: this matters because losing access to session records mid-crisis is a particular kind of disaster, so ten minutes on a recovery plan is time well spent.
  • Training: this matters because a cancelled class caused by a locked-out booking system costs you the room hire as well as the client.
  • Alternative Healing: this matters because even a modest client list is worth keeping a spare copy of, and a spare copy costs nothing.
  • Clinical: this matters because clinical notes are exactly the sort of thing regulators expect you to produce, breach or no breach.
  • Retreat/Centre: this matters because a centre running bookings, rotas and supplier orders through one system has rather more to lose if it all vanishes at once.

Where this came from

The Enterprise Research Centre's 2025 small business report apparently says continuity planning and offline backups help firms recover from cyber incidents faster, though finding the part that says so is another matter entirely.

Enterprise Research Centre, State of Small Business Britain 2025: Navigating Uncertainty. The page currently linked is a publications index, not the report.

Credibility flags: no methodology disclosed, no sample size given, and the claim itself carries no citation despite sitting under an academic publisher's name.

Practice fit: 25 Recency: 100 Method confidence: 0

Marked down heavily on how solid the method is, since nothing here is attributed, while still scoring well on recency and picking up a modest practice-fit score for sitting just outside the six practice types.

Faces of satisfied clients
It's worth considering changes to your marketing practices

What this means for your marketing

  • Write your own one-page continuity plan this week and keep it somewhere you can find without electricity.
  • Back up client records somewhere that isn't just "the cloud", a second cloud service or a USB stick both count.
  • Mention to clients, briefly, that their data is backed up, without turning it into a seminar.
  • Brief whoever answers your phone or books your diary on what to say if the system goes down for a day.
  • Hold off quoting this particular stat to clients until someone can actually locate the report behind it.

Who this is most useful for

Practice typeRelevanceRecommended action
CoachingMediumKeep a backup of client notes outside your main booking app.
TherapyHighPrioritise a written recovery plan given how sensitive session records are.
TrainingMediumBack up class schedules and payment records separately.
Alternative HealingLow-MediumKeep a simple offline copy of your client list.
ClinicalHighTreat this as baseline practice alongside whatever regulators already ask of you.
Retreat/CentreMediumDocument a recovery plan covering bookings, rotas and supplier systems.

Best before

Best before: revisit once Enterprise Research Centre publishes the actual report with a working link, rather than a page that just lists it.

What next?

Most practices only start thinking about backups the Monday the booking system freezes with a full diary waiting behind it.

Talk to us about Whole-practice Marketing

Therapy Space

Something Brought You All The Way Down Here.

A good sign. We have an ecosystem, a visual river and a story garden that have been waiting for a practice like yours. Come and find out what we mean - the coffee's hot and the discovery call goes properly both ways.

Find your Sunlight  ▶