Member Resources-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

Oakleaf Group’s Business Continuity Plan is intended to protect employees, property, data, and records and restore operations as quickly as possible after a significant disruption. It applies across the scope defined in the company’s Business Continuity Policy and is informed by risk assessments and business impact analyses.<br /><br />Critical services have maximum acceptable outages of 4–48 hours and recovery time objectives generally ranging from 4–8 hours. Key systems—including remote desktop servers, domain controllers, file servers, and the co-location firewall—have recovery targets of four hours, supported by redundancy, virtualization, backups, or vendor support.<br /><br />Critical data is backed up through several methods: file-server backups are performed daily, with monthly copies retained for 12 months and annual copies for seven years; SharePoint data is protected through Microsoft cloud retention; and local computer data is backed up hourly to secure cloud storage. Offsite backup storage is geographically separate.<br /><br />The COO leads the Emergency Response Team and manages continuity arrangements, suppliers, alternative sites, communications, and evacuation planning. The IT Team Lead assumes the emergency response role if the COO is unavailable. The team assesses damage, decides whether to relocate or repair facilities and equipment, and assigns recovery tasks. Incidents are reported to Dataprise for IT and communications issues, and to the COO for other incidents.<br /><br />Chevy Chase and Bethesda are reciprocal mirrored recovery sites with staged equipment. Employees may also work from home; broader regional disruptions may require relocation outside the affected area. Mobile phones, telephones, email, and messaging services are listed as communication options.<br /><br />The plan identifies environmental and operational hazards, including power or internet outages, fire, severe weather, earthquakes, and pandemics. It is tested annually through a plan walkthrough involving the Emergency Response Team and IT team. The COO reviews the results, documents findings, and initiates corrective actions.

Keywords

business continuity plan

disaster recovery

critical services

recovery time objectives

data backup

emergency response team

COO

mirrored recovery sites

risk assessment

annual plan walkthrough