intelliHR's Business Continuity policy explains the procedures to recover intelliHR following a disruption in conjunction with the Disaster Recovery Plan. The plan contains a process for business continuity, including the backup and recovery of systems and data, which must be defined and documented. The Business Continuity Plan shall be simulated and tested at least once a year. Metrics shall be measured and identified recovery enhancements shall be filed to improve the process. Security controls and requirements are maintained during all Business Continuity Plan activities.
Policy
Business Impact Analysis (BIA)
The BIA will help identify and prioritize system components by correlating them to the business processes that the system supports. It will allow for the characterization of the impact on the processes if the system becomes unavailable. The BIA has three steps:
- Determine business processes and recovery criticality. business processes supported by the system are identified and the impact of a system disruption to those processes is determined along with outage impacts and estimated downtime. The downtime should reflect the maximum that an organization can tolerate while still maintaining the mission.
- Identify resource requirements. Realistic recovery efforts require a thorough evaluation of the resources required to resume mission/business processes and related interdependencies as quickly as possible. Examples of resources that should be identified include facilities, personnel, equipment, software, data files, system components, and vital records.
- Identify recovery priorities for system resources. Based on the results from the previous activities, system resources can more clearly be linked to critical mission/business processes. Priority levels can be established for sequencing recovery activities and resources.
Work Site Recovery
In the event an intelliHR facility is not functioning due to a disaster, employees will work from home or locate to a secondary site with Internet access until the physical recovery of the facility impacted is complete. intelliHR’s software development organization has the ability to work from any location with Internet access and does not require an office-provided Internet connection.
Application Service Event Recovery
intelliHR informs customers of the status of each service as needed via application communication and/or email communication.