AT&T Study: One in Five U.S. Businesses Does Not Have a Business Continuity Plan in Place

IT Execs: 'Hacking' Will Be Most Significant Threat to Cybersecurity in the Next Five Years

San Antonio, Texas, June 2, 2008

Despite the man-made and natural disasters that are a reality today, many businesses are not fully prepared to maintain their business operations in the event of an emergency, according to an annual AT&T Inc. (NYSE:T) study on business continuity and disaster recovery preparedness for U.S. businesses in the private sector.

According to the report, one in five businesses does not have a business continuity plan developed. Additionally, for the third year in a row, the national survey finds that nearly 30 percent of U.S. businesses do not consider business continuity planning a priority.

For the seventh consecutive year, AT&T's Business Continuity Study surveyed IT executives from companies throughout the United States that have at least $25 million in annual revenue to get their views on disaster planning and business continuity trends.

Other key findings from the 2008 AT&T Business Continuity Study include:

  • Security continues to be key. Even though organizations have learned how to better recognize and even deal with worms, viruses and other threats, there's no question that security remains a critical concern. Two-thirds of IT executives predict that hacking will emerge as the most significant threat to cybersecurity in the next five years. The next most frequently mentioned threats are internal, including accidents (56 percent), sabotage (47 percent) and remote workers (44 percent).
  • Organizations may evolve, but business continuity plans are left untouched. Six out of 10 companies have made some type of business change in the past year that would warrant updating their business continuity plans. However, only 28 percent updated the plans because of any of the changes. Business changes cited by respondents include initiated new or expanded marketing efforts, expanded office space or a moved office, initiated new or expanded online or digital customer service or ordering capabilities, or the company made an acquisition or merged.
  • Simplicity is important with hosted solutions. Even though a hosted environment can provide a company with the resources it needs to continue its business operations, businesses have concerns. Sixty percent of IT executives view security, reliability and cost as their top concerns when thinking about using a hosted environment, and 37 percent are concerned about complexity.
  • Too much information, not enough space to store it. More than one-fourth (28 percent) of IT executives have experienced problems in the past year with insufficient storage space on their company's computers or servers for virtual records.
  • Employee communication is critical. The vast majority (79 percent) of companies surveyed have special arrangements for communicating with key executives during a natural disaster. Although 80 percent of companies have automated text messaging or e-mail capabilities to reach employees outside of work, only 39 percent of companies have automated calling systems to reach those employees by telephone or mobile phone.

"Businesses of all sizes need to be vigilant about business continuity planning, especially in light of the fact that day-to-day demands of running a business are mounting," said Bill Archer, chief marketing officer-AT&T Business. "However, a business continuity plan is not enough and in fact, not all companies have one in place. Organizations must regularly test and update their plans to reflect changes in their business so that, in the event of disaster or major security breach, they can be best-prepared to restore and maintain key processes and operations."

AT&T brings its own business continuity and disaster recovery expertise in running and managing some of the world's largest and most complex networks — including its own — to businesses worldwide.

AT&T offers a wide array of business continuity services, encompassing disaster planning, risk management, recovery preparedness and communications readiness. AT&T Business Continuity Services are comprehensive, providing enterprises with business-impact analysis, risk assessments, a full continuum of storage solutions, high-availability network solutions and network and IT security solutions.

The company also conducts Network Disaster Recovery (NDR) exercises several times a year. These are designed to test, refine and strengthen AT&T's business continuity and disaster recovery services in order to minimize network downtime. By simulating large-scale disasters and network service disruptions, AT&T can apply and refine best practices for rapidly restoring communications to government and business customers.

Throughout the past 10 years, AT&T has invested more than $500 million in its NDR program, which includes specially trained managers, engineers and technicians from across the United States, as well as a fleet of more than 150 self-contained equipment trailers and support vehicles that house the same equipment and components as an AT&T data-routing or voice-switching center.

For more information on the AT&T 2008 Business Continuity Study, visit

Study Methodology
The 2008 AT&T Business Continuity Study is based on results from a telephone survey of 500 Information Technology (IT) executives in five U.S. metropolitan/regional areas, including Chicago, New York, North Carolina (Charlotte/Raleigh/Greensboro), Seattle/Portland and South-Central Texas (San Antonio, Austin, Houston). The sample of participating companies was drawn from Dun and Bradstreet's business list of companies with at least $25 million in revenue located in each of the five areas. The metropolitan areas are based on DMAs (Designated Market Areas). Interviewing was conducted between April 2 and April 17, 2008, and the interviews averaged 10 minutes in length.

Related Media Kits: Related Fact Sheets:
Related News Releases: Web Sites:

About AT&T
AT&T Inc. (NYSE:T) is a premier communications holding company. Its subsidiaries and affiliates, AT&T operating companies, are the providers of AT&T services in the United States and around the world. Among their offerings are the world's most advanced IP-based business communications services and the nation's leading wireless, high speed Internet access and voice services. In domestic markets, AT&T is known for the directory publishing and advertising sales leadership of its Yellow Pages and YELLOWPAGES.COM organizations, and the AT&T brand is licensed to innovators in such fields as communications equipment. As part of its three-screen integration strategy, AT&T is expanding its TV entertainment offerings. In 2008, AT&T again ranked No. 1 on Fortune magazine's World's Most Admired Telecommunications Company list and No. 1 on America's Most Admired Telecommunications Company list. Additional information about AT&T Inc. and the products and services provided by AT&T subsidiaries and affiliates is available at

© 2008 AT&T Intellectual Property. All rights reserved. AT&T, the AT&T logo and all other marks contained herein are trademarks of AT&T Intellectual Property and/or AT&T affiliated companies.

Note: This AT&T news release and other announcements are available as part of an RSS feed at