Business Continuity and Disaster Recovery (BC/DR)
Policy Owner: Triangle Systems Inc.
Effective Date: Feb 3, 2025
Purpose
The purpose of this business continuity plan is to prepare Blockchain Triangle in the event of service outages caused by factors beyond our control (e.g., natural disasters, man-made events), and to restore services to the widest extent possible in a minimum time frame.
Scope
All Blockchain Triangle IT systems that are business critical. This policy applies to all employees of Blockchain Triangle and to all relevant external parties, including but not limited to Blockchain Triangle consultants and contractors.
The following scenarios are excluded from the BC/DR plan scope:
- Loss of availability for a production hosting service provider.
- Loss of availability of Blockchain Triangle satellite offices (these will be considered incidents)
In the event of a loss of availability of a hosting service provider, the <Name of or Owner Title> will confer with the Executive Staff to determine an appropriate response strategy.
Policy
In the event of a major disruption to production services and a disaster affecting the availability and/or security of the Blockchain Triangle office, senior managers and executive staff shall determine mitigation actions.
A disaster recovery test, including a test of backup restoration processes, shall be performed on an annual basis.
Continuity of information security shall be considered along with operational continuity.
In the case of an information security event or incident, refer to the Incident Response Plan.
Alternate Work Facilities
If the Blockchain Triangle office becomes unavailable due to a disaster, all staff shall work remotely from their homes or any safe location.
Communications and Escalation
Executive staff and senior managers should be notified of any disaster affecting Blockchain Triangle facilities or operations.
Communications shall take place over any available regular channels including Slack, email, and cell phone.
Key contacts shall be maintained on the on-call schedule and key contacts:
| Name | Cell Phone | |
|---|---|---|
Roles/Function and Responsibilities
| Role/Function | Responsibility |
|---|---|
| IT | The IT Function shall lead BC/DR efforts to mitigate losses and recover the corporate network and information systems. |
| Departmental Heads | Each department head shall be responsible for communications with their departmental staff and any actions needed to maintain continuity of their business functions. Departmental heads shall communicate regularly with executive staff and the IT Function. |
| Managers | Managers shall be responsible for communicating with their direct reports and providing any needed assistance for staff to continue working from alternative locations. |
| Support | Support, in conjunction with the <Name of or Owner Title> executive leadership shall be responsible for any external and client communications regarding any disaster or business continuity actions that are relevant to customers and third parties. |
| Engineering | Engineering, in conjunction with the Support, shall be responsible for leading efforts to maintain continuity of Blockchain Triangle services to customers during a disaster. |
| Human Resources Function | HR Function shall be responsible for internal communications to employees as well as any action needed to maintain physical health and safety of the workforce. The HR Function will ensure continuity of physical security at the Blockchain Triangle office if applicable. |
Continuity of Critical Services
Recovery Time Objectives (RTO) and Recovery Point Objects (RPO) can be found in Appendix A.
| Version | Date | Description | Author | Approved by |
|---|---|---|---|---|
| 1.0 | Feb 3, 2025 | First Version | Harshit Kothari | <Client Approver> |
Appendix A – RTOs/RPOs
| Rank | Asset | Affected Assets | Business Impact | Users | Owners | Recovery Time Objective (RTO) in hours | Recovery Point Objective (RPO) in hours | Comments / Gaps |
|---|---|---|---|---|---|---|---|---|
| 1 | AWS, Google, Microsoft Datacenters | Site | Core services | All | Engineering | 8 | 8 | |
| 2 | Google Cloud | Network | Core services | All | Engineering | 8 | 8 | |
| 3 | Company Laptops | Hardware | All | IT Function |
