If you don’t have an SOP, this is a great time to start putting it together. It can take months to track down the information, but it can prevent headaches if you have any type of business interruption or malware breach.