Most contingency plans do not fail during the emergency. They fail about three weeks earlier, when the thing that should have set the plan in motion was already visible on a bank balance or in a supplier’s slipping delivery dates, and nobody had ever agreed what counted as the moment to act.
That is the gap worth closing in the next ninety days, and it is a smaller job than the phrase “contingency planning” suggests. You do not need a binder. You need three plays, each one starting with a number that tells you when to run it.
Rank the risks, then throw most of them away
The Small Business Administration puts risk assessment first for a reason, and pairs it with a figure worth sitting with: 25 percent of businesses do not open again after a disaster (U.S. Small Business Administration). Its guidance runs in three moves: assess your risk, write a plan, then practice it with staff before you need it.
The practical version starts with a single sheet. List every disruption you can imagine, then score each one twice, from 1 to 5, on how likely it is in the next year and how badly it would hurt if it happened on your worst week. Multiply the two.
Then cut the list to the top three and delete the rest. This is the step owners resist and the one that makes the exercise survive contact with a real month. A plan covering eleven risks gets written once and never opened. Three plays fit in your head, which means you will actually notice when one of them is starting.
A usable play is three lines, and the first one is a number
Here is where most small-business planning goes wrong. People write the response and skip the trigger, so the plan sits there waiting for someone to declare an emergency, which nobody wants to be the first to do.
Write each play as three lines:
Trigger: the specific, checkable number or event that starts this play. Not “cash gets tight.” Something like “operating account drops below six weeks of payroll” or “our main supplier misses a promised date twice in one month.”
First move: the one action that happens immediately, named down to who makes the call and what they say.
Decided in advance: what the person on shift is allowed to do without reaching you.
That third line is the one that buys back a weekend. If your bookkeeper already knows she can pause the equipment order without asking, the decision happens on Tuesday instead of waiting until you pick up the phone on Saturday.
The three that actually come for small firms
Across most small operations the top three land in the same places, and they are rarely the dramatic ones.
A person is suddenly out. For a five-person shop, one key person unavailable for two weeks is a bigger operational event than a storm. The trigger is the moment you learn about it, and the first move is usually a list you should already have: which jobs get pushed, which customers get called that day, and who has the passwords. Write down where the passwords are before you need them, not the passwords themselves.
A supplier stops being reliable. The trigger is a pattern, not a catastrophe: two missed dates, or a price change past a threshold you set now while you are calm. The first move is calling the backup vendor you already priced. If you have never priced a backup vendor, that is this month’s work, and it takes an afternoon.
Cash gets thin before you notice. This one needs a number you look at on a schedule, which is exactly the habit behind A Cash Flow Playbook Small Businesses Can Run Weekly. A contingency play without a weekly number attached to it is a plan that triggers after the problem, which is not a plan.
Ninety days is the rhythm, not the deadline
Give the first month to writing: the scored sheet, the three plays, the phone numbers. Give the second month to one dry run. Pick the play you believe in least and walk it through out loud with whoever would have to execute it, which usually exposes a missing phone number or a login only one person has.
The rehearsal itself has its own method, and it is worth doing properly rather than as a thought experiment, which is the ground covered in Business Continuity Testing: A 30-Day Plan for SMBs. Give the third month to rewriting whatever the dry run broke, then set a calendar reminder for ninety days out. That reminder is the plan. Everything else is paper.
Where the plan lives decides whether it works
A contingency plan stored only on the office computer is a plan that fails in exactly the scenarios it was written for. It has to open on a phone.
If you already run on Google, Workspace Business Starter is $7.00 per user per month with 30 GB pooled storage, and Business Standard is $14.00 per user per month with 2 TB per user, both billed monthly (Google Workspace pricing). Files marked for offline access open on a phone with no signal, which is the actual requirement here.
If your documents live elsewhere, Dropbox Basic is free with 2 GB, Plus is $9.99 per month with 2 TB for one person, and Standard is $15 per user per month for a team (Dropbox plans). For a three-page plan and a contact list, the free tier is genuinely enough, and paying for storage you do not need is not preparedness.
Whichever you choose, put the three plays in one document, name it something you would search for while stressed, and mark it available offline on the phone of every person named in it. If you want the interview questions that pull the risks out of your head in the first place, the free Anticipate and Prepare for Challenges prompt at BusinessPrompter.com works through the same ranking exercise question by question.
What the plan does not do
It does not make the call for you. What it does is take the decisions that were never genuinely open, the ones you would make the same way every time, and settle them while you are calm and rested rather than at 6 a.m. with a customer waiting. Judgment gets saved for the case the plan did not anticipate, which is the only case that ever really needed you.
It is also worth naming what a good play protects. The point of deciding in advance that a shift can be covered or an order can be paused is that a small team absorbs a bad week without anyone losing their job over it. A plan that treats people as the first cost to cut is not a contingency plan, it is a layoff with extra steps, and it tends to leave the business weaker on the other side.
Score your sheet this week and see what your top three actually are. Most owners find at least one of them is something they have been quietly worrying about for months without ever writing down the number that would tell them it had started.
Frequently asked questions
How long should each contingency play be?
Three lines: the trigger, the first move, and what someone can decide without you. If a play runs longer than a short paragraph, nobody will read it in the moment it is needed.
Why only three risks?
Because a list of eleven gets filed and forgotten. Three fit in your head, which is what makes you notice a trigger early. Add a fourth only after one of the first three has been rehearsed and revised.
What counts as a good trigger?
Something you could check on a given Friday and get a yes or no answer to, such as a balance below a set figure or a supplier missing two promised dates in a month. If deciding whether the trigger fired requires a debate, it is not specific enough yet.
Do I need paid software for this?
No. A free Dropbox Basic account with 2 GB (Dropbox plans) holds a three-page plan and a contact list. Pay for storage when you have files that need it, not for the plan itself.
