Hurricane preparedness for data, devices

As with any other valuable asset, it is important to take steps to protect computing devices and data from a severe weather event like a hurricane.

Protecting computing devices is important because they are expensive (though ever cheaper), and your work will be interrupted during the time it takes to replace and reconfigure them.

Protecting your data is generally more important because data can be very costly to restore.  Indeed, in some circumstances, restoration may be impossible.

Protecting data

The most important step for data is one you already know, but probably fail to practice:

(1) Make backup copies.  Frequently.

Actually, this is an essential security step in any season.  It doesn't take a major hurricane to damage data.  Buildings can experience fires, plumbing failures and other kinds of "environmental" damage at any time.  Catastrophic technical failures, like a hard disk crash, can also happen at any time.  Insurance claims data and warranty repair information show that these events are common.

(2) Store your backups in a secure location -- secure against both weather threats and those from human intruders. 

For your workplace data, network files -- personal Home Directories and department Shared File Directories -- are strongly recommended.  The storage hardware for network file services is in a physically secure, environmentally protected datacenter, monitored constantly to ensure 24/7 availability.  Network files are backed-up nightly to tape.  The backup tapes are routinely taken off site to secure vaults.

(3) Use storage devices and media that provide technical security protections, like encryption based on password or biometric authentication. 

Keeping backups can ensure data availability, but raises the burden of ensuring data confidentiality.  Now there are multiple copies that must be protected from unauthorized access.   We protect the backups we make with a variety of physical and technical safeguards.  If you keep your own, you must take steps to keep them secure.

There is a tradeoff here:  If you trust the physical security of your backup location, you don't need to worry so much about using secure media.  If your backup location is not secure -- for example, you are carrying sensitive data around on a flash drive -- then technical protections like encryption are essential.  That's true whether it's work-related data or your own personal information.

Protecting devices

Standard hurricane preparation steps for computing devices are the same as for any valuable physical asset.  They include:

(4) Move devices away from windows and other vulnerable areas. 

Ideally, use a closet or windowless room away from external walls.  If that is not possible, use the corner of the room farthest from windows, out of the path of wind drafts. 
 
Moving other valuables away from windows is also recommended, of course -- both to protect them, and to keep loose objects from becoming missiles that damage your computing devices.

(5) Locate devices under a sturdy desk or piece of furniture that could withstand the effects of falling debris (such as from a collapsing ceiling). 

Do not put devices directly on the floor, because of the risks from flooding, unless they are in secure waterproof containers.

(6) Wrap devices in heavy-gauge plastic bags to reduce rain/water damage. 

If only light-gauge plastic is available, do a double-layer wrap.  Consider placing devices in or on water-resistant objects, like plastic garbage cans.  (It's one way to keep them off the floor.)

As with moving materials away from windows, waterproof plastic barriers are a good idea for any valuable asset, particularly ones that are likely to be intolerant of water exposure.

(7) Last on the list, but a critical first step, is to unplug all devices. 

This is critical for two reasons:  First, during a storm's approach the chances of damaging power fluctuations are high, as the electrical transmission grid and generating plants are affected.   Second, the results of any water-induced damage are likely to be much greater if the device is not completely disconnected from power sources.

After the storm

(8) Be cautious about using devices, even if power is available and your devices are entirely undamaged. 

Emergency power derived from generators may be particularly "dirty" -- that is, subject to voltage fluctuations.  Power fluctuations are also more likely as the electrical grid is restored.   Only a sufficiently-rated surge protector with battery backup can safely ride through these.

(9) Do not plug in devices that have been exposed to water or other contaminants. 

Sometimes it is possible to clean and dry a device, but it is generally a job for an expert.  You are very likely to increase the damage if you attempt to use electronics before cleaning/drying them.

(10) Remember that your safety comes first.

In your eagerness to get your devices and data back on line, don't risk your personal safety or that of others.  An obvious recommendation, but one that is sometimes forgotten.

More information

Hurricane preparedness and recovery of computing equipment and software (University of Florida)
How to protect equipment and data beforehand, and considerations on recovery/repair afterward

How to recover your data when disaster strikes (American Psychological Association)
Good summary of data recovery tips from an unlikely source

Disaster Recovery (American Institute of Certified Public Accountants)
Good summary of disaster recovery steps, including data recovery, from another unlikely source