We commit to put in place and proactively manage a Business Continuity Management System (BCMS), designed to ensure the continuity of our key products and services and the activities supporting them as defined in scope for our management system. This is critical for us to continue to meet or exceed the expectations of our customers, suppliers and staff.
We believe in continually improving our management system by periodically reviewing our BCMS and its associated controls and processes and ensuring our staff are adequately trained and motivated.
We commit to comply with all applicable legal, statutory, corporate, contractual and other requirements.
We are committed:
- To create and maintain a business-wide risk and impact analysis programme and an aligned Business Continuity Plan (BCP).
- To deploy adequate resources to develop, implement, maintain and improve our BCMS.
- To enhance customer satisfaction from the perspective of resilience and continuity.
- To continually strive to improve our BCMS processes, in a cost effective manner.
- To learn from incidents and industry best practices with an intent to improve the BCMS.
- To review our policy at least annually for its continued suitability and applicability.
We consider business continuity in the same context as disaster recovery - both are encompassed under incident management as the situation would be the result of an incident. It is the ensuing recovery that determines whether it is a short-term disruption or long-term problem.
We consider:
- Denial of service attack
- Cyber attacks
- Hacking
- Office unavailability (outages and access)
- Staff
- Pandemic
- Terrorism
- Environmental threats
- Loss of facilities
- Systems
- Key suppliers
Our Business Continuity policies are:
- All staff are enabled to work remotely in the event of an issue that stops us using our offices.
- All operational configuration and information assets operate within tier three data processing centres.
- All operational software and information assets are backed up to tier three data processing centres with geographic distribution.
- All business support systems are cloud based and operate from tier three data processing centres. These include:
- Service desk ticketing
- Finance
We also have the following documented processes:
- Incident Management
- Disaster Recovery
As a policy, we do not incorporate customer testing or requirements due to the scalability of numbers and we do not share any operational documents such as testing exercises as they contain sensitive information on internal systems and staff.
Need further support?
If you still require assistance with us or have any further questions, please raise a ticket with our support team.
Alternatively, please see our frequently updated knowledge base articles for reference.