Member Resources-APPENDIX J - Business Continuity Plan

APPENDIX J - Business Continuity Plan

Pdf Summary

Oakleaf Group’s Business Continuity Plan aims to protect employees, property, data, and records and restore operations as quickly as possible after a significant disruption. It applies across the scope defined in the company’s Business Continuity Policy and addresses backups, critical systems, communications, alternate work locations, suppliers, and annual testing.<br /><br />The plan uses business impact and risk assessments to guide prevention, incident response, and recovery. Critical services generally have maximum acceptable outages of 24–48 hours, with recovery time objectives ranging from 4 to 8 hours; email and SharePoint depend on Microsoft 365. Key systems—including remote desktop, domain controllers, file servers, ADFS, and firewalls—have redundancy, backups, or vendor support arrangements.<br /><br />Data is protected through daily CommVault backups of file servers, off-site storage with Google Nearline, Microsoft 365 retention, and hourly cloud backups of local machines. A Dataprise data center in Sterling, Virginia supports continued operations if Oakleaf offices are unavailable.<br /><br />The Emergency Response Team, led by the COO as Emergency Response Manager, assesses disruptions, decides whether to activate recovery plans, and assigns recovery tasks. IT incidents are reported to Dataprise; other incidents go to the COO. Recovery options include alternate offices in Chevy Chase and Bethesda, or employees’ home offices. For wider regional disruptions, operations may move outside the affected area.<br /><br />The plan also establishes emergency contacts and authority coordination, building evacuation assembly points, communication methods, and procedures for managing key suppliers. The COO coordinates an annual plan walkthrough with emergency response and IT teams, reviews the results, and initiates corrective actions and improvements.

Keywords

business continuity plan

disaster recovery

data backup

critical systems

emergency response team

recovery time objective

alternate work locations

Microsoft 365

annual testing

supplier management