Our commitment

Disruption is a question of when, not if. We plan for the loss of a system, a supplier, a site or a key person, and we rehearse the plan rather than filing it.

Planning

• Documented recovery priorities and target recovery times for critical services
• Backups held separately and restored on a test schedule
• Alternative suppliers identified for single points of failure
• Remote-capable operations so loss of a physical site is not loss of service
• Annual scenario exercise with actions tracked to completion

Communicating

If an incident affects partners or users, we tell them what happened, what it means for them, and what we are doing, without waiting for the full picture.

Governance and review

This policy is owned by the Chief Operating Officer and approved by the board. It is reviewed at least annually, and sooner if the law, our operations or our risk profile changes.