Based on the context, Standard 7: Continuity Planning is referenced [1] but detailed evidence requirements are not provided in the snippets. The DTAC guidance does mention that backups should be tested at least annually to ensure data can be restored [2]. For a two‑person start‑up, I will draft a proportionate Business Continuity Plan (BCP) covering the key threats (IT failure, cyber attack, data loss, power cuts, internet/phone outage, office unavailability) and a testing log template. These align with the expected scope of Standard 7.
Purpose
To ensure that [Your Organisation Name] can continue or quickly recover critical data processing activities during a significant disruption, and to meet the requirements of DSPT Standard 7 (Continuity Planning) [1].
Scope
This plan covers all systems, data, and processes used by the two directors. It addresses the following scenarios:
Critical Functions
Roles & Responsibilities
Both directors share responsibility:
Response Procedures by Scenario
| Scenario | Immediate Actions | Recovery Steps | Maximum Acceptable Downtime |
|---|---|---|---|
| IT system failure (laptop/server crash) | 1. Inform both directors. 2. Use secondary device if available. 3. Contact IT support (if external). | Restore data from backup. If no backup, contact cloud provider for recovery. | 4 hours (business hours) |
| Cyber attack (ransomware, phishing compromise) | 1. Disconnect affected device from network. 2. Preserve logs. 3. Report to Director B. | Run antivirus scan; restore from clean backup if needed; change all passwords; consider ICO notification if personal data affected. | 24 hours |
| Data loss (accidental deletion) | 1. Stop using the affected system. 2. Check recycle bin/trash. 3. Inform Director B. | Restore from backup (cloud or local). | 2 hours |
| Power cut | 1. Save work and shut down devices if safe. 2. Use battery power (laptops/mobile hotspot). 3. Monitor expected restoration time. | Wait for power restoration; test systems; if prolonged, move to home working. | 4 hours |
| Internet / phone outage | 1. Use mobile hotspot (phone tethering). 2. Switch to mobile phone for calls. | Alternative internet provider backup (e.g., 4G router). | 2 hours |
| Office unavailable (fire, flood, pandemic) | 1. Ensure all staff are safe. 2. Retrieve critical data from cloud. 3. Announce alternative working location (home or temporary office). | Work remotely using cloud systems; inform clients/partners. | 1 business day |
Backup and Restoration
Communication Plan