Business Continuity and Disaster Recovery Policy
Company has developed the following business continuity and disaster recovery (BC/DR) policy in support of a comprehensive program for BC, DR and overall business survivability.
The Company, like any other entity, is exposed to potential risks that could disrupt or destroy critical business functions. Our strategy for continuing business in the event of an incident is to ensure the safety and security of all employees and to continue critical business functions.
Purpose and Scope
The purpose of the BC/DR policy is to ensure that all Company business activities can be kept at normal or near normal performance following an incident that has the potential to disrupt or destroy the Company.
Statement of Policy
Each department in the Company is responsible for preparing current and comprehensive business continuity plans (BCP) for its operations. Certain departments, such as Information Technology (IT), are also responsible for disaster recovery plans (DRP) to ensure that any damage or disruptions to critical assets can be quickly minimized and that these assets can be restored to normal or near-normal operation as quickly as possible.
When a plan is completed, approved and implemented, each plan will include procedures and support agreements which ensure on-time availability and delivery of required services. Each plan must be certified annually with the business continuity policy compliance process through the BC/DR Team.
Company recognizes the importance of an active and fully supported BC/DR program to ensure the safety, health and continued availability of employment of its employees and delivery of quality services for customers and other stakeholders. [Company] requires the commitment of each employee, department and vendor in support of the activities required to protect Company assets, mission and survivability.
Directors of the company are designated as the corporate management liaison responsible for the BC/DR program. Resolution of issues in the development of, or support of, all BC/DR plans and associated activities should first be coordinated with the BC/DR Team and appropriate internal or external organizations before submitting to the corporate management liaison. The issue resolution process is defined in the following section.
Verification of Policy Compliance
BC/DR compliance verification is managed by the BC/DR Team with support from other relevant internal departments. Each plan must define appropriate procedures, staffing, tools and workplace planning activities necessary to meet compliance requirements. Plan templates have been developed to facilitate the plan development process, and these templates shall be used for all plans. Detailed policy compliance verification activities are defined by the BC/DR Team and are included in the Appendix at the end of this policy.
BC/DR Compliance Verification is required annually and is facilitated by the BC/DR Team. Waivers for temporary compliance verification may be given if a detailed written waiver request issued by the department manager is approved by the BC/DR Team corporate management liaison. Maximum delay for compliance is one year from the original date of compliance