Training Course 1-APPENDIX A

APPENDIX A

Pdf Summary

Oakleaf Group’s Business Continuity Plan (BCP) outlines how the company will protect employees and assets and restore operations quickly after a significant disruptive event affecting facilities or services. The plan applies across the Business Continuity Management System (BCMS) scope and is based on Business Impact Analysis (BIA), risk assessment, and risk treatment activities. It focuses on data backup and recovery, continuity of critical systems and applications, alternate communications, alternate work locations, critical suppliers, and ongoing testing.<br /><br />Risk management requires preventive actions to reduce incident likelihood and impact, documented scenarios, and incident-specific response procedures. The BIA defines Maximum Acceptable Outage (MAO) and Recovery Time Objectives (RTO) for key services: Email (MAO 4 hours), Remote Desktop (MAO 24 hours/RTO 4 hours), Internet (MAO 24/RTO 8), file access (MAO 24/RTO 8), data analytics (MAO 24/RTO 8), Salesforce (MAO 48), and cloud services (Office 365/SharePoint dependent on provider). Critical systems include remote desktop servers, domain controllers, file servers, ADFS, and firewalls, generally with MAO 24 hours and RTO 4 hours, supported by redundancy and image-based backups.<br /><br />Backups are managed through CommVault with offsite storage to Google Nearline for file servers (daily, monthly, and annual retention); Office 365 data is retained in real time; local machines are backed up hourly via Backblaze.<br /><br />The emergency response structure defines crisis managers, an Emergency Response Team led by the COO (or IT lead if absent), incident reporting paths (Dataprise service desk for IT issues; COO for others), decision authorities, and coordination with authorities. Evacuation assembly points are specified for both offices, along with prioritized communication methods.<br /><br />Recovery sites are mirrored between Chevy Chase and Bethesda, with staged network equipment and required items to bring. Key suppliers include Dataprise and Salesforce. The plan assesses various disaster scenarios and requires annual walkthrough testing, with results reviewed by the COO and documented in a report.

Keywords

Business Continuity Plan (BCP)

Business Continuity Management System (BCMS)

Business Impact Analysis (BIA)

Maximum Acceptable Outage (MAO)

Recovery Time Objective (RTO)

data backup and disaster recovery

CommVault backups

Google Nearline offsite storage

Emergency Response Team (ERT)

alternate work locations and recovery sites