Business Continuity Policy
This policy describes OTCICU's approach to maintaining continuity of essential cooperative services for members in the event of an operational disruption.
- Document Owner
- OTCICU Management
- Version
- 1.0
- Effective Date
- Date of Publication
- Status
- Published
1.Purpose
This policy sets out OTCICU’s commitment to maintaining continuity of essential cooperative services for members in the event of a disruption to our normal operations.
2.Scope
This policy covers OTCICU’s core member-facing activities, including membership administration, contributions, and communication with members.
3.Business Continuity Objectives
Our objective is to minimise disruption to members and to restore normal cooperative operations as promptly as reasonably possible following an incident.
4.Critical Services and Functions
The functions we consider critical to our members include membership record-keeping, processing of contributions, and channels for members to contact the cooperative.
5.Roles and Responsibilities
OTCICU’s Executive Committee is responsible for overseeing the cooperative’s response to significant operational disruptions and for keeping members informed as appropriate.
6.Communication During Disruption
Where a disruption affects services to members, OTCICU will aim to communicate relevant updates through the channels available to it, such as this website or direct contact with members.
7.Technology and System Disruption
Our website and administrative systems are hosted with third-party infrastructure providers. In the event of a disruption to those services, we will rely on the recovery capabilities of those providers and will communicate with members as needed.
8.Payment and Service Provider Disruption
Where a disruption originates with a third-party payment or service provider, that provider is responsible for restoring its own services. OTCICU will communicate with members about any resulting impact on cooperative transactions.
9.Data Availability
Member and cooperative records are maintained with our technology infrastructure provider, which applies its own standard availability and resilience practices for the systems it operates.
10.Backup and Recovery Principles
OTCICU relies on its infrastructure providers’ backup and recovery practices to help protect against data loss. Specific recovery time or recovery point commitments have not been separately established and will be documented here if and when they are.
11.Alternative Operating Arrangements
Where our usual channels for engaging members are unavailable, OTCICU will use whatever alternative means of communication are reasonably available, such as phone or direct contact with the Executive Committee.
12.Incident Escalation
Significant disruptions are escalated to the Executive Committee for assessment and decision on an appropriate response.
13.Recovery and Restoration
Following a disruption, OTCICU will work to restore normal service to members as soon as reasonably practicable, taking into account the nature of the disruption and any dependency on third-party providers.
14.Testing and Review
OTCICU intends to review this policy periodically to ensure it remains appropriate to the cooperative’s activities and its reliance on third-party service providers.
15.Policy Maintenance
This policy is maintained by OTCICU management and updated as our operations, systems, or service provider arrangements evolve.
Last Updated: Date of Publication · Review Cycle: Annually, or as regulatory requirements change