Business Continuity and Disaster Recovery Policy

Purpose

Clients rely on FourSight Technologies Inc. to keep their technology running. This policy sets out how we prepare for, respond to and recover from disruptions to our own operations and to the client services we manage.

Scope

It covers FourSight’s people, systems, suppliers and premises, and the backup and recovery services we provide to clients under their service agreements.

Risks we plan for

• Cyberattacks, including ransomware and account compromise
• Outages at cloud, hosting, internet or telecommunications providers
• Loss of power or access to our premises
• Unavailability of key personnel
• Hardware failure or data loss
• Public health emergencies and severe weather

How we stay resilient

• Remote-capable operations: our core tools are cloud-based, so the team can work from any secure location.
• Backups: critical data is backed up regularly to a separate location or account, and restores are tested.
• Protected access: multi-factor authentication on all critical systems, with documented emergency access to administrative accounts.
• Documentation: an up-to-date inventory of systems, suppliers and client environments, with written procedures for key tasks.
• No single point of failure: cross-training so that more than one person can perform each critical task.
• Alternate communications: backup phone and email channels to reach clients and staff if a primary channel fails.
• Supplier resilience: we use established providers and consider their resilience before relying on them.

Client services

For managed clients, backup frequency, retention and recovery objectives are defined in each client’s service agreement. We monitor backups, test restores, and maintain the information needed to recover client systems.

Activation and communication

The Lead Partner decides when to activate this policy. When a disruption affects clients, we notify them promptly, give regular status updates until service is restored, and provide a summary afterwards. Security incidents are also handled under our Information Security Policy.

Testing and review

We test our recovery arrangements at least once a year, including a tabletop exercise, review this policy after every significant incident, and update it as our business grows.

Related policies

See all of our policies.