Business Solutions.com Richman Investments Rel 1, Ver.0 8/11/2012 Richman Investments Business Continuity Plan By

Emergency notification contacts Name | Address | Home | Mobile phone | | | | | | | | | | | | | | | | | | | | | | | | | | | | |

Date | Summary of changes made | Changes made by (Name) | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
Revisions control page

Purpose

The purpose of this business continuity plan is to prepare Richman Investments in the event of extended service outage caused by factors beyond our control (natural disasters, man-made events), and to restore services to the company in a minimum time frame. All Richman Investments sites are expected to implement preventive measures whenever possible to minimize operational disruptions and to recover as rapidly as possible when an accident occurs.

The plan identifies vulnerabilities and recommends necessary measures to prevent extended communication service outages. It is a plan that encompasses all Richman Investments system sites and operations facilities.

Scope
The scope of this plan is limited to disaster recovery. This is a business continuity plan, not a daily problem resolution procedures document.

Plan objectives * Serves as a guide line for Richman Investments recovery teams. * References and points to the location of critical data. * Provides procedures and resources needed to assist in recovery. * Identifies vendors and customers that must be notified in the event of a disaster. * Assists in avoiding confusion experienced during a crisis by documenting, testing and reviewing recovery procedures. * Identifies alternate sources for supplies, resources and locations. * Documents storage, safeguarding and retrieval procedures for vital records.

Assumptions * Key people (team leaders or alternates) will be available following a disaster. * This document and all vital records are stored in a secure off-site location and not only survive the disaster but accessible immediately following the disaster. * Each support organization will have its own plan consisting of unique recovery procedures, critical resource information and procedures.

Disaster definition

Any loss of utility service (power, water), connectivity (system site), or catastrophic event weather, natural disaster, vandalism) that causes an interruption in the service provided by Richman Investments operations. The plan identifies vulnerabilities and recommends measures to prevent extended service outages.

Recovery teams * Team Leader * Information Security Members * Network Administrators * Physical Security Personnel * Legal Personnel * Human Resources (HR)

Team member responsibilities * Each team member will designate an alternate * All of the members should keep an updated calling list of their work team members’ work, home, and cell phone numbers both at home and at work. * All team members should keep this plan for reference at home in case the disaster happens after normal work hours. All team members should familiarize themselves with the contents of this plan. * Instructions for using the business continuity plan This plan becomes effective when a disaster occurs. Normal problem management procedures will initiate the plan, and remain in effect until operations are resumed at the original location or a replacement location and control is returned to the appropriate functional management.

Disaster declaration

The senior management team, with input from the EMT, DRT and IT, is responsible for declaring a disaster and activating the various recovery teams as outlined in this plan. In a major disaster situation affecting multiple business units, the decision to declare a disaster will be determined by Richman Investments senior management. The EMT and DRT will respond based on the directives specified by senior management. Notification

Regardless of the disaster circumstances, or the identity of the person(s) first made aware of the disaster, the EMT and DRT must be activated immediately in the following cases: * Two or more systems and/or sites are down concurrently for three or more hours * Five or more systems and/or sites are down concurrently for three or more hours

External communications

Corporate public relations personnel are designated as the principal contacts with the media (radio, television, and print), regulatory agency, government agencies, and other external organizations following a formal disaster declaration. Emergency management standards

Data backup policy
Full and incremental backups preserve corporate information assets and should be performed on a regular basis for audit logs and files that are irreplaceable, have a high replacement cost, or are considered critical. Backup media should be stored in a secure, geographically separate location from the original and isolated from environmental hazards.

Department-specific data and document retention policies specify what records must be retained and for how long. All organizations are accountable for carrying out the provisions of the instruction for records in their organization.

IT follows these standards for its data backup and archiving:
Backup Policy
Backup media is stored at locations that are secure, isolated from environmental hazards, and geographically separate from the location housing the system.

0 Backups greater than three years old are destroyed every six months. 1 Backups less than three years old must be stored locally off-site. 2 The system supervisor is responsible for the transition cycle of tapes.

System Images * A copy of the most current image files must be made at least once per week. * This backup must be stored offsite. 3 The system supervisor is responsible for this activity.

Off-site storage procedures * Backups and disks, and other suitable media are stored in environmentally secure facilities. * Backups or disk rotation occurs on a regular schedule coordinated with the storage vendor. * Access to backup databases and other data is tested annually.

Emergency management procedures The following procedures are to be followed by system operations personnel and other designated Richman Investments personnel in the event of an emergency. Where uncertainty exists, the more reactive action should be followed to provide maximum protection and personnel safety. Note: Anyone not recognized by the IT staff as normally having business in the area must be challenged by the staff who should then notify security personnel. These procedures are furnished to Richman Investments management personnel to take home for reference. Several pages have been included to supply emergency contacts. In the event of any situation where access to a building housing a system is denied, personnel should report to alternate locations. Primary and secondary locations are listed below.

Alternate locations Workplace: Richman Investments * Attempt to contact your immediate supervisor or management via telephone. Home and cell phone numbers are included in this document Workplace: Richman Investments * Attempt to contact your immediate supervisor or management via telephone. Home and cell phone numbers are included in this document Workplace:Richman Investments * Attempt to contact your immediate supervisor or management via telephone. Home and cell phone numbers are included in this document

In the event of a natural disaster In the event of a major catastrophe affecting Richman Investments facility, will immediately notify the Emergency Management Team. Procedure | STEP | ACTION | | 1 | Assess the situation and determine if outside assistance is needed; if this is the case, dial 9-1-1 immediately. | | 2 | Immediately notify all other personnel in the facility of the situation and be prepared to cease voice operations accordingly. | | 3 | Immediately notify all other personnel in the facility of the situation and be prepared to cease operations accordingly. | | 4 | Water detected below the raised floor may have different causes: * If water is slowly dripping from an air conditioning unit and not endangering equipment, contact repair personnel immediately. * If water is of a major quantity and flooding beneath the floor (water main break), immediately implement power-down procedures. While power-down procedures are in progress, evacuate the area and follow management’s instructions. |

Plan review and maintenance

This plan must be reviewed semiannually and exercised on an annual basis. The test may be in the form of a walk-through, mock disaster, or component testing. Additionally, with the dynamic environment present within Richman Investments, it is important to review the listing of personnel and phone numbers contained within the plan regularly.

The hard-copy version of the plan will be stored in a common location where it can be viewed by site personnel and the EMT and DRT. Electronic versions will be available via Richman Investments.