Training Course 1-APPENDIX B

APPENDIX B

Pdf Summary

Oakleaf Group’s Business Continuity Plan (BCP) outlines how the company will maintain or rapidly resume operations after a significant disruptive event affecting facilities, systems, or services. It applies to the full Business Continuity Management System scope defined in the Business Continuity Policy. The plan’s objectives are to protect employees and property, assess financial/operational impacts, and safeguard data/records while restoring operations as quickly as possible.<br /><br />The BCP is based on Business Impact Analysis and risk assessment/treatment. Risk management requires preventive controls (per the Risk Treatment Plan), scenario planning, and defined incident responses (per the Incident Response Plan). Maximum Acceptable Outage (MAO) and Recovery Time Objectives (RTO) are defined for key services such as email (MAO 4 hours), remote desktop (MAO 24 hours, RTO 4 hours), internet (MAO 24 hours, RTO 8 hours), file access (MAO 24 hours, RTO 8 hours), SharePoint and Office 365 services (dependent on Microsoft), Salesforce (dependent on Salesforce), and data analytics (MAO 24 hours, RTO 8 hours). Critical infrastructure includes redundant remote desktop servers, domain controllers, file servers, ADFS, and firewall coverage (including virtual firewall/warranty support).<br /><br />Data protection uses redundant configurations and backups: CommVault daily and long-term file server backups with offsite storage in Google Nearline; real-time Office 365 retention; and hourly local machine backups via Backblaze.<br /><br />An Emergency Response Team led by the COO (or IT Lead as backup) coordinates decisions, reporting, communications, supplier coordination (e.g., Dataprise, Salesforce), and liaison with authorities. Evacuation assembly points are specified for Chevy Chase and Bethesda offices. Recovery sites are mirrored between Chevy Chase and Bethesda, with staged network equipment and required items lists.<br /><br />The plan assesses multiple disaster scenarios (e.g., power/internet outage, storms, fire, pandemic) and calls for annual BCP walkthrough testing led by the COO, with documented results and corrective actions.

Keywords

Business Continuity Plan (BCP)

Business Continuity Management System (BCMS)

Business Impact Analysis (BIA)

Risk assessment and treatment

Maximum Acceptable Outage (MAO)

Recovery Time Objective (RTO)

Incident Response Plan

Disaster recovery and recovery sites

Data backup and retention (CommVault, Backblaze, Google Nearline, Office 365)

Emergency Response Team and evacuation procedures