Business Continuity Policy

CloudVantage is committed to maintaining the resilience, continuity and recoverability of its critical business processes and services. The Business Continuity Management System (BCMS) provides the framework through which CloudVantage identifies business continuity risks, prepares for disruptive incidents, maintains critical operations and recovers services within defined and approved recovery requirements.

CloudVantage is committed to:

• Maintaining the continuity and resilience of critical business processes and services, including cloud infrastructure and supporting operations, within the defined BCMS scope.
• Identifying, assessing and treating business continuity risks and opportunities that may affect the organisation's ability to deliver its products and services.
• Conducting Business Impact Analyses (BIA) and risk assessments to identify critical activities, dependencies, impacts and recovery requirements.
• Establishing and maintaining appropriate Recovery Time Objectives (RTOs), Recovery Point Objectives (RPOs) and other recovery requirements for critical services and processes.
• Establishing business continuity and disaster recovery strategies, plans and procedures appropriate to identified risks and operational requirements.
• Providing the resources, competence, awareness, communication and support necessary to implement, maintain and continually improve the BCMS.
• Maintaining appropriate arrangements for incident response, crisis management, business continuity, disaster recovery and service recovery.
• Conducting regular testing and exercising of business continuity and disaster recovery arrangements to assess their effectiveness and identify areas for improvement.
• Ensuring that relevant suppliers, service providers, technology partners and other external dependencies are considered within business continuity planning where their disruption may affect critical operations.
• Complying with applicable legal, regulatory, contractual and other business continuity requirements.
• Ensuring that business continuity considerations are incorporated into relevant business processes, projects, technology changes and strategic decisions.
• Promoting business continuity awareness and ensuring that personnel understand their responsibilities for maintaining and supporting organisational resilience.
• Learning from incidents, exercises, tests, changes and other relevant events and implementing corrective actions where required.
• Continually improving the suitability, adequacy and effectiveness of the BCMS through monitoring, measurement, internal audits, management reviews, corrective actions and lessons learned.

This policy applies to the business continuity activities, processes, people, information, facilities, technologies, suppliers and other dependencies within the defined BCMS scope.

It applies to all employees, contractors and relevant third parties whose activities support critical business processes or services within the scope of the BCMS.

• Top Management provides leadership, direction, resources and support for the effective implementation and continual improvement of the BCMS.
• Process and Business Owners are responsible for identifying continuity requirements, maintaining appropriate recovery arrangements and ensuring that assigned continuity responsibilities are implemented.
• BCMS/Business Continuity Management Function coordinates the implementation, monitoring, testing, review and continual improvement of the BCMS.
• All Employees and Relevant Third Parties are responsible for understanding and complying with applicable business continuity requirements, participating in relevant training and exercises, and promptly reporting incidents or conditions that may affect business continuity.

The BCMS supports the following objectives:

• Compliance: Achieve and maintain 100% compliance with applicable legal, regulatory and contractual business continuity requirements.
• Continuity and Recovery: Ensure critical business services can be maintained or recovered within approved RTOs and RPOs following disruption through effective continuity and disaster recovery arrangements.
• Resilience and Continual Improvement: Strengthen organisational resilience through regular BIA, risk assessments, testing, training, lessons learned and corrective actions.