It\u2019s hard to be truly prepared to take the full impact of a Category 5 hurricane. Ten years ago, in the case of Hurricane Katrina and the city of New Orleans, there was the added devastation of flooding caused by failed levees. It will hopefully be a very long time before another disaster of that magnitude strikes New Orleans, or any other city for that matter, but organizations still need to be prepared for such an event. As it turns out, the cloud is an ideal tool for managing the risks associated with a hurricane or other natural disaster.\n\n\nEven prior to Hurricane Katrina it was a security mantra and data protection best practice to ensure at least one backup of crucial data was maintained offsite. The logic being simply that you don\u2019t want your primary data storage and all of your backups to be destroyed in the same hurricane, fire, flood or earthquake.\n\n\n\n\n\n \nAlso on CIO.com:\n\n5 Ways to disaster-proof your data backups\nData held hostage; backups to the rescue\nVirtual hard drives: The IT pro trick that lets you back up your data for free\n\n\n\n\n\nOffsite backups solve only part of the problem, though, if your servers and data are maintained locally. When disaster strikes and wipes out your primary data, you\u2019ll have to acquire the backup data, deploy and configure new hardware at some secondary location, and restore the data. You\u2019re still looking at days of downtime in a best-case scenario.\n\nEmbracing the cloud to reduce risk\n\nThe city of New Orleans and businesses like Entergy and DirectNIC that struggled to survive the devastation of Hurricane Katrina learned some valuable lessons. One of the primary caveats when it comes to business continuity is to mitigate risk by embracing the cloud.\n\n\nLamar Gardere, director of information technology and innovation for the City of New Orleans, admits that things were still in disarray when the current administration took office in 2010. The IT infrastructure was aging and many of the city\u2019s critical applications were still being run on physical servers.\n\n\nOne of Gardere\u2019s first tasks was to modernize onto a highly virtualized infrastructure to allow for servers to be quickly created, resized and moved from one site to another in the case of a major disaster. \u201cWe created a private cloud with the ability to leverage all the same capabilities as you might imagine are available if you were using Amazon\u2019s cloud, for example. This flexibility is at the heart of our disaster recovery capabilities and allows us to quickly transfer\/failover services to remote locations,\u201d Gardere says. \u201cDuring normal times, it also allows us to maximize our infrastructure investment, consolidate IT resources across areas of government, better manage resources remotely and respond more quickly to our customers.\u201d\n\n\n[Related: Tech apocalypse! 9 doomsday scenarios]\n\n\nDirectNIC is one of a few businesses that managed to stay up and running during Katrina \u2013 partly a result of being prepared and partly a function of being safely on the 11th floor well above any flood damage. Even DirectNIC learned a thing or two from Hurricane Katrina, though. Vernon Decossas, CEO of DirectNIC explains, \u201cWe host our own operations, however, we also have the ability to move our operations onto cloud providers within the span of hours. It\u2019s provided a peace of mind that we can keep our operations going regardless of external issues.\u201d\n\n\nGardere also elaborates on the decision to implement a private cloud rather than simply provisioning services from one of the public cloud providers. He notes there are pros and cons to public cloud for any organization and that the city weighed those on a per-application basis to determine the best solution. \u201cThe City uses the cloud strategically and where appropriate to take advantage of its convenience while avoiding some of its problems. Perhaps most notably, the City has moved its payroll system to the cloud using ADP, ensuring that this critical but low bandwidth application is available regardless of the state of the City\u2019s IT environment.\u201d\n\nMoving beyond the cloud\n\nLeveraging the cloud and moving critical servers and data to a cloud-based infrastructure will help organizations in New Orleans mitigate risk and maintain business continuity the next time a major natural disaster occurs, but it\u2019s not enough by itself. Beyond the cloud, organizations also must have a clearly defined business continuity and disaster recovery plan in place and have staff that are properly trained to execute it when the time comes.\n\n\n[Related:\u00a010 tips to make sure you are ready when a disaster strikes]\n\n\n\u201cEntergy holds yearly storm drills to prepare all of our employees for what may come. We use that time to talk about \u2018what ifs\u2019 and come up with solutions to questions posed during the drills,\u201d says Kay Jones, a spokesperson for Entergy. \u201cWe use this time to get better at responding and be prepared for any situation that can arise when a storm hits our service territory.\u201d\n\n\nGardere stresses the importance of performing regular maintenance on backup equipment that rarely sees use and talked about how the City of New Orleans continues to strive toward more complete testing and monitoring procedures. \u201cWe perform semi-annual tests of basic back up functions and hold an annual table-top exercise simulating a hurricane to test strategy execution. We refresh documentation and review roles and responsibilities on an annual basis.\u201d\n\nLive to fight another day\n\nFor some companies even the best business continuity and disaster recovery plan won\u2019t help. A local restaurant or the corner gas station can\u2019t just continue operating from the cloud or move to an alternate location. No amount of practicing or preparing will enable such a business to remain operational while it\u2019s literally under water.\n\n\nThose businesses can still benefit from using cloud-based applications and data storage to ensure those things survive the catastrophe, though, and thankfully most businesses are not that dependent on the specific physical location. By moving critical systems and data to the cloud and practicing to smoothly implement business continuity and disaster recovery procedures organizations can mitigate the risk of the next Katrina-like event and be prepared to continue operations.