BusinessContinuityPolicy

Business Continuity Policy

---

Last updated: January 20, 2023

Introduction

• Zora Communication's Business continuity plan outlines the guidelines, procedures and workarounds to follow in case of an incident that causes business impacting outages. being used.

Scope

• Zora Communication is a "software as a service (SaaS)" organization, and its production infrastructure is completely hosted on third-party infrastructure provider(s). Consequently, most of its core operations can be carried out even if staff members cannot reach their office(s). It suffices for staff members to have access to any laptop to carry out their basic job functions in order to keep our customer services uninterrupted. The advantage of Zora Communication's workforce is that if there are clusters of people or systems that are unavailable, the rest of the company will continue to operate normally.
• As a result, most of the critical business continuity aspects largely cover scenarios that represent vendor and service outages that could affect Zora Communication business operations. This plan identifies key resources to ensure that business may continue, perhaps in a limited capacity, in the event of disruptions.

Business Continuity Plan and Procedures

• If Zora Communication's primary work site is unavailable, the management will attempt to facilitate an alternative, temporary, work site. This may include coworking spaces. Depending on the nature and duration of disruption that prevents Zora Communication staff from working from their office, the management may decide to request all staff to work from their respective homes remotely.
• Zora Communication depends on specific key vendors in order to provide its products and services to customers. In case of disruption to any such dependencies, please follow the below process:
• Visit that system's status page. If such a page does not exist, or if no listed issue would explain the observed outage, please visit the twitter status of the vendor. Submit a support ticket to the service-provider / vendor through their support page. For some of our key vendors, we may have a special contact or account manager. In case of an outage or a suspected outage, please contact such an account/support contact.

Note:If one of the vendors that provide our internal communication services are unavailable, please use alternate communication channels. For instance, if the Instant Messaging tools become unavailable, we would use email and/or video conferencing tools to continue communication.If the service disruption is caused by our infrastructure provider(s), please refer to our Disaster Recovery Plan to check if this classifies as a Disaster, and then take appropriate steps.

Policy

• Zora Communication management reviews this Business Continuity Plan on an annual basis.
• When the BCP is rehearsed, it must be followed up with a retrospective in order to identify lessons learned and playbooks needing creation. After the annual rehearsal, the BCP is also reviewed to see if it supports forthcoming changes in the business operations.

Non compliance

• Zoracom staff who violate this policy may face repercussions in proportion to the impact of their violation. Zoracom management will determine how serious a staff member's offense is and decide the appropriate penalty. Penalties may include
  1. Reprimand
  2. Demotion
  3. Detraction of benefits for a definite or indefinite time
  4. Suspension or termination for more serious offenses