BUSINESS CONTINUITY PLANNING POLICY
|
Document Identification |
HSNZ/POL/29 |
|
|
Document Name |
Business Continuity Planning Policy |
|
|
Master Copy |
CISO |
|
|
Version Number |
1.3 |
|
|
Date Of Release |
15 Aug 2023 |
|
|
Prepared By |
Eparama Tuibenau |
CISO |
|
Approved by |
Kevin McAfee |
Managing Director |
VERSION HISTORY
|
Sl No |
Version No. |
Prepared by |
Approved by |
Description of Version |
Date |
Reason for Version Change |
|
|
From |
To |
||||||
|
1 |
1.0 |
- |
CISO |
MD |
First Release |
14 Apr 2020 |
No changes made |
|
1 |
1.0 |
1.1 |
CISO |
MD |
Updated |
04 Aug 2021 |
Modifications due to changes in HealthSafe |
|
1 |
1.1 |
1.2 |
CISO |
MD |
Reviewed |
28 Jul 2022 |
Annual review |
|
1 |
1.2 |
1.3 |
CISO |
MD |
Reviewed |
15 Aug 2023 |
Annual review |
DOCUMENT STATUS
|
Date |
Document Status |
|
14 Apr 2020 |
Modified |
|
04 Aug 2021 |
Reviewed |
|
28 Jul 2022 |
Reviewed |
|
15 Aug 2023 |
Current |
Table of Contents
1 Purpose
2 Scope
3 Input
4 Output
5 Interacting Process
6 Abbreviations, Acronyms and Definitions
7 Procedure
8 Monitoring the Process
9 Records
- PURPOSE
The purpose of this document is to establish and maintain a policy for business continuity planning for HealthSafe. - SCOPE
These procedures applies to all aspects of business continuity planning, etc - ABBREVIATIONS, ACRONYMS AND DEFINITIONS
|
Abbreviation |
Description |
|
FH |
Functional Head |
|
IT |
Information Technology Department |
|
TL |
Team Lead |
|
CISO |
Chief Information Security Officer |
4 INPUT
To implement, to maintain or restore operations and ensure availability of information at the required level and in the required time scales following interruption to, or failure of, critical business processes.
5 OUTPUT
To ensure no business continuity is lost and no customer complaint and maintain the confidentiality and Integrity.
6 INTERACTING PROCESS
All the ISMS and BCP Team
7 PROCEDURE
This plan speaks about the business resumption when the situation is more critical and cannot be handled by individuals remote working sites. Plan clearly to define the service resumption from an alternative remote locations.
Management of HealthSafe agreed and accepted individuals to relocate to an alternative remote location that is safe, secure, and has robust and secure internet connectivity.
The data can be accessed from any secure location with the appropriate access credentials issued by the company and must be accessed with either work devices or a pre-approved device.
Following Procedure Defines the Steps to Switchover the operation to alternative remote locations:
- Management team to notify staff
- Resource verification
- Acknowledgment of setup ready
- Service resumption confirmation
- Coordinating to new remote locations
1 Management team to notify staff:
The management team need to notify staff to work from an alternative remote location with a date and also the reason.
2 Resource verification:
Functional Heads will coordinate with staff and verify that they have everything they require to work securely and sufficiently in their new remote location.
Following list must be verified for required Resources:
2.1 Staffing:
Every team member is fully setup and ready to commence their position/tasks.
2.2 Capacity:
Ensuring that the internet bandwidth is sufficient and that there are no bottlenecks with the new remote working environment.
2.3 Information:
Ensuring the availability of necessary software and repository access are available.
2.4 Facility:
Minimum of one vehicle or public transport should be available for any urgent transportation at the remote location.
- Acknowledgment of Setup Ready:
Once all the resources are verified, the Functional Heads will acknowledge accepting the workload via email to the CEO.
- Service Resumption Confirmation:
After confirmation of the setup of the remote location, both sides will communicate and ensure that load is diverted to the remote sites.
- Coordinating to Remote Sites:
Once transferred to the new remote location, the Functional Heads will coordinate to the individuals to keep track of the activities and necessary support.
8 MONITORING PROCESS
Senior Management Team Monitors this process
9 RECORDS
NIL