We identify and evaluate the risks that would stop the operation, so an incident is met with resources and a plan — not a scramble. The policy is reviewed each year at management review, and it is available to any interested party.
Objectives
- 01Keep critical activities running at the levels management has set, and according to client need
- 02Shorten the time to restore full operation to an acceptable level
- 03Limit the effect of an outage on the company and on the client
How the system is built
- 01Continuity requirements are planned and evaluated in a systematic way
- 02Recovery strategies and incident-response plans are written, then tested and drilled
- 03A minimum acceptable level is defined for critical activities
- 04The health and safety of staff and associates is protected in every instance
Compliance
Management is committed to the legislative, regulatory, and other requirements that govern the company — for legal operation and for continuity. Employees take part in the procedures of the Integrated Management System. Compliance is binding.