Training Session 3-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

The Oakleaf Group, an information security firm, has developed a Business Continuity Plan to ensure the continuous operation of its facilities and systems in the event of a significant business disruptive event. The plan focuses on recovering and resuming business operations after a disruption, safeguarding employees and property, conducting financial and operational assessments, and protecting company data and records. The plan includes provisions for data backup and recovery, alternative communications, alternative physical locations for employees, critical suppliers, and exercising and testing.<br /><br />The plan was developed based on the results of a Business Impact Analysis and risk assessment. Risks that could affect business continuity were identified and preventive actions to reduce the probability and mitigate the consequences of these incidents were implemented. The plan also includes the maximum acceptable outage (MAO) and recovery time objective (RTO) for critical activities and systems.<br /><br />An emergency response structure is established, including a Crisis Manager, an Emergency Response Team, and designated emergency contact information. The Emergency Response Team is authorized to make decisions to resolve the situation and assesses the extent of damage in order to determine the appropriate response. The plan also outlines evacuation procedures and assembly points in case of a building emergency, as well as means of communication to be used during a disruptive incident.<br /><br />Alternative recovery sites and infrastructure are identified, including off-site locations in Chevy Chase and Bethesda. Relationships with key suppliers and outsourcing partners are managed to ensure business continuity interoperability. Potential disaster scenarios, such as electrical outages, internet outages, and natural disasters, are assessed and contingency plans are developed.<br /><br />The plan is regularly exercised and tested to ensure its accuracy and effectiveness. Results of exercising and testing are reviewed by the Chief Operating Officer, who takes appropriate corrective actions and makes recommendations for improvement. The plan is approved and owned by the Director of Operations and the CEO of the Oakleaf Group.

Keywords

Oakleaf Group

Business Continuity Plan

continuous operation

recovering business operations

safeguarding employees

data backup and recovery

alternative communications

alternative physical locations

exercising and testing

emergency response structure