NUKG Business Solutions Pvt Ltd. Business Continuity and Disaster Recovery Policy

Transcription

1 NUKG Business Solutions Pvt Ltd Business Continuity and Disaster Recovery Policy Version No 1.0 Document Classification Prepared by CH Sai Ramadasu Reviewed by Ravi Kanduri Approved by Ravi Kanduri Date C-2 Internal 01-June-2018 This document is the copy right of NUKG Business Solutions Pvt Ltd., No part of this document may be photocopied, reproduced, stored or transmitted in any form or by any means without the prior permission of the company.

2 Document Amendment Record A Added, M Modified, D Deleted Version No Date Section No Page No Change Mode (A/M/D) June Initial Version Brief description of change Version 1.0 Effective date: 01-June C-2 Internal Page i

3 Table of Contents 1.0 INTRODUCTION PLAN OBJECTIVES DISASTER MANAGEMENT & ENABLING BUSINESS CONTINUITY ALTERNATE LOCATION INFORMATION PLAN REVIEW AND MAINTENANCE TEMPLATES... 6 Version 1.0 Effective date: 01-June C-2 Internal Page ii

4 1.0 Introduction 1.1 Purpose The purpose of this document is to provide a detailed description of the disaster recovery and business continuity policy implemented at NUKG Business Solutions. 1.2 Scope The approach detailed in this document applies to all NUKG's operations in general and to it's Hyderabad Office facility in particular. This is a business continuity plan, not a daily problem resolution procedures document. 1.3 Reference Documents Information Technology & Data Security Policy Facility Management Policy Human Resources Management Policy Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 1 of 7

5 2.0 Plan objectives Serves as a guide for the NUKG recovery teams. Provides procedures and resources needed to assist in recovery. Identifies vendors and customers that must be notified in the event of a disaster. Assists in avoiding confusion experienced during a crisis by documenting, testing and reviewing recovery procedures. Identifies alternate sources for supplies, resources and locations. Documents storage, safeguarding and retrieval procedures for vital records. 2.1 Assumptions Key people (team leaders or alternates) will be available following a disaster. A national disaster such as nuclear war is beyond the scope of this plan. This document and all vital records are stored in a secure off-site location and not only survive the disaster but are accessible immediately following the disaster. 2.2 Disaster definition Any loss of utility service (power, water), connectivity (system sites), or catastrophic event (weather, natural disaster, vandalism) that causes an interruption in the services provided by NUKG operations. The plan identifies vulnerabilities and recommends measures to prevent extended service outages. 2.3 Disaster Recovery Team (DRT) Responsible for overall coordination of the disaster recovery effort; evaluation and determining disaster declaration; and communications with senior management. Responsible for overall coordination of the disaster recovery effort; establishment of the emergency command area; and communications with senior management and the EMT. IT team will facilitate information technology infrastructure restoration and access activities. 2.4 Team member responsibilities Each team member will designate an alternate All of the members should keep an updated calling list of their work team members work, home, and cell phone numbers both at home and at work. All team members should keep this plan for reference at home in case the disaster happens after normal work hours. All team members should familiarize themselves with the contents of this plan. Contact information of all teams' members should be captured and shared with all employees. This information should be kept updated at all times and any updates should be immediately shared with all employees. Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 2 of 7

6 Contact Name Sai Ramadasu Ravi Kanduri Joseph Kumar Vasudeva Rao Home Contact Numbers Cell Phone 2.5 Instructions for using the business continuity plan Invoking the plan This plan becomes effective when a disaster occurs. Normal problem management procedures will initiate the plan, and remain in effect until operations are resumed at the original location or a replacement location and control is returned to the appropriate functional management. Disaster declaration The senior management team, with input from the DRT, is responsible for declaring a disaster and activating the various recovery teams as outlined in this plan. In a major disaster situation, the decision to declare a disaster will be determined by NUKG senior management. The DRT will respond based on the directives specified by senior management. Notification Regardless of the disaster circumstances, or the identity of the person(s) first made aware of the disaster, the DRT must be activated immediately in the following cases: Outage at power utility causing loss of utility power supply with ETA beyond six hours. Network and / or internet outage with ETA beyond two hours. Limited / unavailable access to facility, whatsoever reason, with ETA beyond two hours. Internal communications As and when the senior management declares an incident as disaster, all employees should be updated about the disaster situation. Individual team leads should invoke the respective team plans to continue to provide support as per agreed service levels during a disaster. External communications As and when the senior management declares an incident as disaster, individual team leads should inform respective clients of the disaster circumstances and initiate the respective team plans to continue to provide support as per agreed service levels. Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 3 of 7

7 3.0 Disaster Management & Enabling Business Continuity In the event of a natural disaster In the event of a major catastrophe affecting NUKG facility, immediately notify DRT. Admin supervisor / team to coordinate medical assistance to any injured associates. Team supervisors to coordinate with available associates to facilitate work from home and work from alternate location. Admin supervisor / team to work with management in upgrading the alternate location to a temporarily full-fledged facility at the earliest. In the event of a fire If fire or smoke is present in the facility, evaluate the situation, determine the severity, categorize the fire as major or minor and take the appropriate action as defined in this section. Call fire station / emergency services as soon as possible if situation warrants. Personnel are to attempt to extinguish minor fires (e.g., single hardware component or paper fires) using hand-held fire extinguishers located throughout the facility. Any other fire or smoke situation will be handled by qualified building personnel until the local fire department arrives. In the event of a major fire, immediately evacuate the area and call fire station / emergency services. In the event of any emergency situation, system security, site security and safety of personnel are the major concerns. If possible, the operations supervisor should remain present at the facility until the fire department has arrived. In the event of a major catastrophe affecting the facility, immediately notify senior management. In the event of a network services provider outage In event of a network service provider outage notify senior management immediately. Determine cause of outage and timeframe for its recovery. If outage will be greater than two hours, route all work via alternate services. If it is a major outage and all carriers are down and downtime will be greater than two hours, inform client contacts and temporarily handover the operations / service delivery to designated onsite resources. 4.0 Alternate Location Information Address: Capacity: Rupa Nivas Mallikarjuna Nagar Old Bowenpally Hyderabad Networked workstations: Ten Workspace for users with laptops: Ten Internet connectivity: Beam's fuel connection Power supply: Utility service provider, UPS and DG backup Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 4 of 7

8 5.0 Plan review and maintenance This plan must be reviewed quarterly and exercised on an annual basis. The test may be in the form of a walk-through, mock disaster or component testing. Additionally, with the dynamic environment present within NUKG, it is important to review the listing of personnel and phone numbers contained within the plan regularly. The hard-copy version of the plan will be stored in a common location where it can be viewed by site personnel and the DRT. Electronic versions will be available via NUKG network resources as provided by IT. Each recovery team will have its own directory with change management limited to the recovery plan coordinator. Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 5 of 7

9 6.0 Templates Local emergency numbers of first responders, public utility companies, vendors, ISP & others: Name of the Organization Contact Name Cell # Client emergency contacts information: Name of the Client Contact Name Cell # Disaster / Incident form: Upon notification of an disaster / incident situation the on-duty personnel will make the initial entries into this form. It will then be forwarded to the DRT, where it will be continually updated. This document will be the running log until the incident/disaster has ended and normal business has resumed. The following information will be captured in this form: Time and date of the incident Type of incident Building access issues Impact to operations Running log Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 6 of 7

10 Critical Equipment Status - Post Disaster Evaluation # Equipment Condition Salvage Status Comments Legend Condition: OK - Undamaged DBU - Damaged, but usable DS - Damaged, requires salvage before use D - Destroyed, requires reconstruction Version 1.0 Effective date: 01-June-2018 C-2 Internal Page 7 of 7