PikoHANA: Business Continuity Plan - PHMS-400-1.3-PL


PURPOSE

This policy seeks to outline the general principles behind the Company’s Business Continuity Plan.

RESPONSIBILITIES

  • All employees of PIKOHANA are involved in Business Continuity.
  • All employees of PIKOHANA are expected to comply with the provisions of this policy and have the responsibility of reporting non-compliant practices.
  • PIKOHANA's Managing Director or his appointee is responsible for:
    • Overseeing the policy and ensuring compliance.
    • Managing the policy on a day-to-day basis.
    • Making sure that any questions or clarifications about the implementation of this policy and its contents are addressed in a timely manner.

POLICY STATEMENTS

1.0 Crisis Events

1.1 A crisis is loosely defined as an event that would jeopardize PIKOHANA's ability to operate as per regular day-to-day operations. A non-exhaustive list of examples includes:

  • War
  • Acts of terrorism (e.g. bombs)
  • Acts of God (e.g. earthquakes, tsunamis)
  • Damage to office building due to accidents
  • Loss of critical company personnel
  • Catastrophic loss of cloud data, data centres or connectivity.

1.2  PIKOHANA does not wish to prescribe what exactly a crisis is and when crisis management kicks in as it believes its staff has the ability to assess the situation and take the necessary steps.

1.3  To deal with crises, PIKOHANA has organized its employees into Crisis Management Teams (CMT). The organization of these teams is the responsibility of the Managing Director and must be amended in accordance with headcount adjustments. The guiding principle behind the composition of the teams is to ensure PIKOHANA’s ability to operate key functions should other teams be incapable of doing so due to the crisis at hand.

1.4 The Crisis Management Teams have the following roles and functions:

  • Team Leader – Overall lead on managing the crisis and CMT. The primary objective is to ensure every member’s safety and the secondary objective is to restore normal operations ASAP.
  • Second in Command (2IC) – Support the Team Leader and take over his/her role in the event that the Team Leader cannot perform his/her duties due to the crisis.
  • Members – General support for the entire team.

2.0 Crisis Management

2.1 In the event of a crisis, team leaders should immediately decide if the crisis makes it unsafe or affects the ability for their teams to work from the normal place of business. If so, the next default working location would be the homes of each team member.

2.2 The critical activities that need to be reinstated as quickly as possible are the following:

Activities

Responsible

Party

"Offline"

no more

than

Key contact for assistance

Overall management of the crisis

MD

N.A.

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

Email, file access, mobile phone

connectivity, etc.

IT Manager

Outsourced

Service Support

4 hours

Andre Meyer

andre.meyer@cloudsolutions.asia

+65 3158 2176

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

Crisis Communications with Clients

Accounts

within 4 hours

Hazirah Rashid, Senior Account Manager

hrashid@pikohana.com

+60 19-770 1194

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

Liability payments

Accounts

7 days

Hazirah Rashid, Senior Account Manager

hrashid@pikohana.com

+60 19-770 1194

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

On-boarding Activities

Accounts

10 days

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

Hazirah Rashid, Senior Account Manager

hrashid@pikohana.com

+60 19-770 1194

Business Development Activities

MD

10 days

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

Technology Development

ZenCode

10 days

Thenappan Alagappan

thenappan@zencode.guru

+65 9770 4158

Matt Foley, MD

mfoley@pikohana.com

+65 9327 1966

2.3 If the business is not able to resume normal activities within three days of the event, the senior management team should meet at an offsite location to ensure the crisis is properly managed and that ongoing business matters are addressed. 

2.2 To meet face to face and conduct business, management should consider using one of their residences, if available; or an outsourced executive service centre, specifically Regus Outsourced Office Centres, located at the following addresses in Singapore; call 1800 622 1563.

3 Church Street

Level 8

Singapore 049483

Centennial Tower

Levels 21 & 34

3 Temasek Avenue

Singapore 039190

1 Fullerton Road #02-01

One Fullerton

Singapore 049213

Alternatively, the management team and key stakeholders may consider meeting at a central location in Singapore’s CBD, such as Harry’s Bar in Boat Quay.

3.0 IT

3.1 Staff may access their e-mail remotely via Outlook from anywhere Internet service is available so long as the Email server hosted Microsoft 365 is still operational. Employees may also access their e-mail via the web at the following link by inputting their user name and password once prompted https://login.microsoftonline.com/

3.2 Microsoft uses Class 1 data centres and is hence not expected to experience any outages unless in the event of a severe disaster (e.g. terrorism, nuclear, etc.).  In the event that the Microsoft 365 platform does go down, then it will take at least seven days to recover the data and re-establish IT operations to a basic level of service.  Given the current budget restraints, PIKOHANA has not established an offsite backup system for its IT services noting this has been raised as a risk with the Board who has assessed it as being an acceptable risk.

4.0 Business Continuity Testing

4.1 Every year, PIKOHANA will undertake business continuity testing. Each test should minimally simulate the inability to work from the office as well as loss of personal computing equipment. This test is organized by the Operations Manager and MD.

4.2 This test should ideally be conducted to test the PIKOHANA’s ability to respond to sudden crisis events.

4.3 During each test, each CMT should be able to continue most of the major business functions. The calling tree must also be activated and tested.

4.4 After each test, team leaders are responsible for collating feedback for improving the Business Continuity measures and report these back to the Operations Manager and MD who are responsible for refining the measures and policy.

5.0 Violations Of the Policy

5.1 Violations of the Business Continuity Plan may result in civil and regulatory penalties against PIKOHANA and individual employees. This could negatively impact PIKOHANA's ability to conduct business in particular jurisdictions.

5.2 Failure to comply with this Policy may also result in disciplinary action, including termination of employment. Any investigation and disciplinary actions shall be in accordance with the Personnel Policy on Disciplinary Actions.

6.0 Policy Review

6.1 This policy is reviewed every 12 months in compliance with the Quality Management Policy.

6.2 Associated procedures and guidelines are also reviewed with the policy.


Was this article helpful?