Resource Center-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

Oakleaf Group’s Business Continuity Plan (BCP) defines how the company will maintain or rapidly restore operations after a “significant business disruptive event” affecting facilities and/or services. Applicable across the full Business Continuity Management System scope, the plan prioritizes employee safety, protection of property and records, financial/operational assessment, and fast resumption of critical services.<br /><br />The BCP is based on Business Impact Analysis (BIA) results plus risk assessment and treatment. Unacceptable risks require preventive actions (to reduce likelihood and impact), scenario planning, and defined responses in the Incident Response Plan.<br /><br />Recovery targets are established via Maximum Acceptable Outage (MAO) and Recovery Time Objectives (RTO). Key service examples include: Email MAO 4 hours (Office 365 dependent); Remote Desktop MAO 24 hours/RTO 4 hours; Internet MAO 24 hours/RTO 8 hours; file access MAO 24 hours/RTO 8 hours; data analytics MAO 24 hours/RTO 8 hours; Salesforce MAO 48 hours. Critical systems (e.g., remote desktop servers, domain controllers, file servers, ADFS, and firewalls) generally have MAO 24 hours and RTO 4 hours, supported by redundancy, virtualization, and image-based/file backups.<br /><br />Backups include daily file server backups via CommVault with offsite storage to Google Nearline (monthly retained 12 months; annual retained 7 years), real-time Office 365 retention, and hourly local machine backups via Backblaze.<br /><br />An Emergency Response Team (led by the COO or, if absent, the IT Team Lead) is empowered to assess damage, determine recovery options, and assign responsibilities (facilities, equipment, logistics, insurance, staffing). IT incidents are reported to Dataprise’s Global Service Desk; other incidents to the COO. Public/media communications are controlled by the CEO.<br /><br />Alternate “mirrored” recovery sites are the Chevy Chase and Bethesda offices, with staged network equipment and required items to bring. The plan covers evacuation assembly points, prioritized communication methods, supplier coordination (e.g., Dataprise, Salesforce), and annual BCP walkthrough testing with documented results and corrective actions.

Keywords

Business Continuity Plan (BCP)

Business Continuity Management System (BCMS)

Business Impact Analysis (BIA)

risk assessment and treatment

Incident Response Plan

Maximum Acceptable Outage (MAO)

Recovery Time Objective (RTO)

Emergency Response Team (ERT)

backup and disaster recovery (CommVault, Google Nearline, Backblaze, Office 365)

alternate recovery sites (Chevy Chase, Bethesda)