This thesis focuses on the topics of Business Continuity Management and Disaster Recov-ery Management in the context of small and medium sized businesses which offer or use IT services in the cloud. The aim of this thesis is to carry out a theoretical research of BCM and DRM in the aforementioned context and to analyze situation in a specific company based on the results of the research. This includes analysis of specific incidents that hap-pened in the company, analysis of how the company reacts to the incidents and how are the incidents logged and reported. The analysis identifies weak spots in the company and their potentials of improvement. The most serious weak spot discovered is that BCM and DRM are not implemented in the company. In ...