Resource Center-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

Oakleaf Group’s Business Continuity Plan (BCP) outlines how the company will maintain or quickly restore operations after a significant disruptive event affecting facilities or services. It applies to the full Business Continuity Management System scope defined in Oakleaf’s Business Continuity Policy. The plan’s objectives are to protect employees and property, assess operational and financial impacts, and safeguard company data and records so operations can resume as fast as practicable based on disruption severity.<br /><br />The BCP covers data backup and recovery, critical applications and systems, alternative communications, alternate work locations, critical suppliers, and annual exercising/testing. Risk management is driven by Business Impact Analysis (BIA), risk assessments, and treatment plans, with incident scenarios and responses defined in an Incident Response Plan.<br /><br />Maximum Acceptable Outage (MAO) and Recovery Time Objectives (RTO) are defined for key services. Examples include: Email MAO 4 hours; Remote Desktop MAO 24 hours (RTO 4 hours); Internet MAO 24 hours (RTO 8 hours); File access and analytics MAO 24 hours (RTO 8 hours); Salesforce MAO 48 hours. Critical systems (e.g., remote desktop servers, domain controllers, file servers, ADFS, firewalls) use redundancy, virtualization, and image-based/backed-up configurations to meet recovery targets.<br /><br />Backups include daily and long-term retention for file servers via CommVault with offsite storage in Google Nearline; Office 365/SharePoint uses cloud retention; endpoint data is backed up hourly via Backblaze.<br /><br />An Emergency Response Team led by the COO (or IT Team Lead if absent) is empowered to make recovery decisions, coordinate reporting (IT incidents through Dataprise GSD; others to the COO), and manage communications and public messaging (CEO). Evacuation assembly points are defined for Chevy Chase and Bethesda offices. Recovery sites are mirrored between Chevy Chase and Bethesda, with staged networking equipment and required items listed.<br /><br />The plan evaluates likely disasters (e.g., power/internet outages, storms, fire, pandemic) and mandates annual walkthrough testing led by the COO, followed by a results report and corrective actions.

Keywords

Business Continuity Plan (BCP)

Business Continuity Management System (BCMS)

Business Impact Analysis (BIA)

Risk assessment and treatment plans

Incident Response Plan

Maximum Acceptable Outage (MAO)

Recovery Time Objective (RTO)

Data backup and disaster recovery

Alternate work locations and recovery sites

Emergency Response Team (ERT)