Business Continuity Plan (BCP) / Business Continuity Management (BCM) Policy

1. Purpose

The purpose of this Business Continuity Plan (BCP) / Business Continuity Management (BCM) Policy is to establish a framework for ensuring that Igile Technologies India Pvt Ltd can continue its critical business operations during and after significant disruptions. This policy aims to minimize the impact of disruptions on business operations, protect company assets, and ensure the safety of employees.

2. Scope

This policy applies to all employees, departments, and business units of Igile Technologies India Pvt Ltd. It covers all critical business functions and processes, including IT systems, personnel, facilities, and communication channels.

3. Definitions

• Business Continuity Plan (BCP): A strategy and set of procedures designed to ensure the continuation of critical business operations during and after a disruption.
• Business Continuity Management (BCM): The process of developing, implementing, and maintaining the BCP to ensure organizational resilience.
• Disruption: Any event that significantly impacts normal business operations, including natural disasters, cyberattacks, or other emergencies.
• Critical Business Functions: Essential activities and processes that are vital for the continued operation of the organization and delivery of services.

4. Policy Guidelines

4.1. Business Impact Analysis (BIA

Objective: Conduct a Business Impact Analysis to identify and assess the potential impact of disruptions on critical business functions and processes.

Frequency: The BIA will be conducted annually or whenever significant changes occur within the organization.

Output: The BIA will result in a list of critical functions, their dependencies, and the acceptable recovery time objectives (RTOs) and recovery point objectives (RPOs).

4.2. Risk Assessment

Objective: Perform a risk assessment to identify potential threats and vulnerabilities that could impact business operations.

Frequency: Risk assessments will be performed annually and after significant changes to the business environment or operations.

Output: The assessment will provide a risk register detailing identified risks, their likelihood, impact, and mitigation strategies.

4.3. Business Continuity Strategy

Objective: Develop and implement strategies to ensure the continuity of critical business functions during and after a disruption.

Components: Strategies may include backup and recovery solutions, alternative work arrangements, and emergency response plans.

Review: The strategy will be reviewed annually and updated based on the results of the BIA and risk assessment.

4.4. Incident Response Plan

Objective: Establish procedures for responding to incidents and disruptions to minimize their impact on business operations.

Components: The incident response plan will include incident detection, communication protocols, and escalation procedures.

Training: Regular training and drills will be conducted to ensure that employees are familiar with the incident response plan.

4.5. Recovery and Restoration

Objective: Define processes for recovering and restoring critical business functions after a disruption.

Recovery Time Objectives (RTOs): The maximum allowable downtime for each critical function.

Recovery Point Objectives (RPOs): The maximum allowable data loss for each critical function.

Testing: Regular testing of recovery procedures to ensure effectiveness and readiness.

4.6. Communication Plan

Objective: Develop a communication plan to ensure timely and accurate communication with stakeholders during a disruption.

Components: The plan will include internal and external communication protocols, contact lists, and messaging templates.

Testing: Regular testing of communication procedures to ensure effectiveness during emergencies.

4.7. Roles and Responsibilities

• Business Continuity Team: A designated team responsible for overseeing the development, implementation, and maintenance of the BCP.
• Department Heads: Responsible for ensuring that their departments comply with the BCP and participate in training and testing.
• Employees: Expected to follow the procedures outlined in the BCP and report any issues or concerns to their supervisors.

4.8. Documentation and Records

Objective: Maintain comprehensive documentation of the BCP, including policies, procedures, and test results.

Storage: Documentation will be securely stored and accessible to authorized personnel only.

Review: Documentation will be reviewed and updated annually or as needed.

4.9. Compliance and Audit

Objective: Ensure compliance with relevant regulatory requirements and industry standards related to business continuity.

Audits: Regular internal and external audits will be conducted to assess the effectiveness of the BCP and identify areas for improvement.

Compliance: Adherence to legal and regulatory requirements will be monitored and enforced.

5. Responsibilities

• CISO: Oversees the development and implementation of the BCP/BCM policy and ensures alignment with organizational objectives.
• Business Continuity Manager: Manages the BCP/BCM program, coordinates testing and training, and updates the plan as needed.
• Department Heads: Ensure that departmental continuity plans are developed, implemented, and maintained.
• Employees: Follow the procedures outlined in the BCP and participate in training and testing activities.

6. Policy Review and Updates

Review Cycle: This policy will be reviewed annually or in response to significant changes in the business environment or operations.

Updates: Any updates to the policy will be communicated to all relevant personnel, and training will be provided to reflect changes.

7. Enforcement

Failure to comply with this policy may result in disciplinary action, up to and including termination of employment. Compliance will be monitored through regular audits and assessments.

8. Contact Information

For questions or additional information regarding this policy, please contact the Business Continuity Manager at support@igile.in.