Business Continuity and Disaster Recovery (BC/DR)
Policy Owner: Lucas
Effective Date: 01.03.20252025s
Purpose
The purpose of this business continuity plan is to prepare Tekai in the event of service outages caused by factors beyond our control (e.g., natural disasters, man-made events), and to restore services to the widest extent possible in a minimum time frame.
...
Roles and Responsibilities
Role | Responsibility |
Principal Engineer | The Principal Engineer shall lead BC/DR efforts to mitigate losses and recover the corporate network and information systems. |
Departmental Heads | Each department head shall be responsible for communications with their departmental staff and any actions needed to maintain continuity of their business functions. Departmental heads shall communicate regularly with executive staff and the Lead Engineer. |
Managers | Managers shall be responsible for communicating with their direct reports and providing any needed assistance for staff to continue working from alternative locations. |
COO | The COO, in conjunction with the CEO and CFO shall be responsible for any external and client communications regarding any disaster or business continuity actions that are relevant to customers and third parties. |
Principal Engineer | The Principal Engineer, in conjunction with the COO, shall be responsible for leading efforts to maintain continuity of Tekai services to customers during a disaster. |
COO | The COO shall be responsible for internal communications to employees as well as any action needed to maintain physical health and safety of the workforce. The COO shall work with the Lead Engineer to ensure continuity of physical security at the Tekai office. |
Continuity of Critical Services
Procedures for maintaining continuity of critical services in a disaster can be found in Appendix A. Recovery Time Objectives (RTO) and Recovery Point Objects (RPO) can be found in Appendix B. Strategy for maintaining continuity of services can be seen in the following table:
KEY BUSINESS PROCESS | CONTINUITY STRATEGY |
Customer (Production) Service Delivery | Rely on service provider availability commitments and SLAs |
IT Operations | Not dependent on HQ. Critical data is backed up to alternate locations. |
Utilize Gmail and its distributed nature, rely on Google's standard service level agreements. | |
Finance, Legal and HR | All systems are vendor-hosted SaaS applications. |
Sales and Marketing | All systems are vendor-hosted SaaS applications. |
Plan Activation
This BC/DR shall be automatically activated in the event of the loss or unavailability of the Tekai office, or a natural disaster (i.e.,
severe weather, regional power outage, earthquake) affecting the larger Turku region.
Version | Date | Description | Author | Approved by |
1.0 | 01.03.2025 | First version | Lucas | |
...
Appendix A - Business Continuity Procedures by Scenario
...
- Notify Customer Base to use Support Portal or Email
- Support Staff use Mobile Phones and/or Land Lines as needed Email Down (Gmail/Corp Email)
- Support Staff manually manage ‘case' related communications
- Support Staff use alternate email accounts as needed (Hotmail) CRM Down
- Notify Customer Base that CRM is down
- Activate ‘Spreadsheet' Case Tracking (Google Sheets)
- Leverage ‘Production' Database for Entitlements, Case History, Configuration data. Video Conferencing/ScreenShare Down (Zoom)
- Support Staff utilize alternate service as needed
Appendix B - RTOs/RPOs
Rank | Asset | Affected Assets | Business Impact | Users | Owners | Recovery Time Objective (RTO) | Recovery Point Objective (RPO) | Comments / Gaps |
1 | Google Datacenters | Site | Core services | All | Engineering | |||
Google Cloud | Network | Core services | All | Engineering | ||||
Home Office ISP Networks | Network | IT Ops, Development | N/A | |||||
Subcontractor Networks | Network | Development | N/A | |||||
Third Party Networks | Network | Sales | N/A | |||||
Company Laptops | Hardware | All | IT Ops | |||||
Digital Projector | Hardware | All | IT Ops | |||||
Office Printers | Hardware | Inability to print in corporate office | All | IT Ops |
Personal Mobile Device | Hardware | |||||||
Wireless Access Points (WAP) | Hardware | All | IT Ops |