Training Course 1-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

The Oakleaf Group Business Continuity Plan is designed to keep facilities, systems, communications, and critical operations functioning during a significant disruptive event, or to restore them as quickly as possible. Its core goals are to protect employees and property, assess financial and operational impact, safeguard data and records, and resume business based on the severity of the disruption.<br /><br />The plan is based on business impact analysis and risk management. It defines maximum acceptable outage (MAO) and recovery time objectives (RTO) for key services such as email, remote desktop, internet, SharePoint, file access, Salesforce, and data analytics. Critical systems including remote desktop servers, domain controllers, file servers, ADFS, and firewalls have recovery strategies such as redundancy, virtualization, backup copies, and support warranties.<br /><br />Data protection includes daily, monthly, and annual backups for file servers, real-time retention for Office 365 SharePoint data, and hourly backups for local machines. Backups are stored offsite through cloud and geographically separate solutions.<br /><br />The emergency response structure assigns crisis managers, an emergency response team, and specific decision-making authority. Incidents involving IT are reported to Dataprise; other incidents go to the COO. The plan also includes coordination with authorities, evacuation procedures, assembly points, and communication methods.<br /><br />Recovery sites are established in Chevy Chase and Bethesda, with staged equipment and required items for relocation. The plan also addresses supplier and outsourcing partner coordination, especially with Dataprise and Salesforce.<br /><br />Potential disasters such as power outages, internet outages, water damage, storms, earthquakes, fire, and pandemics are assessed for likelihood and impact. The plan is tested annually through walkthrough exercises led by the COO, and results are reviewed with corrective actions documented.

Keywords

business continuity plan

disaster recovery

risk management

recovery time objectives

maximum acceptable outage

data backup

emergency response

critical systems

recovery site

pandemic preparedness