6.3 Disaster Recovery and Business Continuity

In line with our commitment to provide uninterrupted service and maintain the safety and accessibility of our data, we have instituted robust Disaster Recovery (DR) and Business Continuity (BC) plans.

Our Disaster Recovery plan details the step-by-step process we follow to restore our IT infrastructure and systems in the event of a disruption or disaster. This includes a well-defined set of policies and procedures that guide our response to and recovery from a system failure. It encompasses:

• Regular data backups: We ensure that all of our data is consistently backed up to secure and geographically separate locations. These backups are created multiple times per day and are encrypted to safeguard sensitive information. We periodically test our ability to restore these backups to ensure that data restoration is achievable within the defined Recovery Time Objective (RTO).

• Emergency mode operation: We have in place measures to continue essential operations even during a disaster. These operations are defined based on their criticality to the business. This ensures that our clients face minimum disruption to services.

Our Business Continuity Plan, on the other hand, provides a blueprint for how operations will continue in the aftermath of a significant disruption. It goes beyond just the technology aspects and takes into account other factors like personnel, physical workspace, communication, and critical business processes. This plan includes:

• Critical business processes: We have identified business processes that are critical for maintaining service levels and have designed our plan to ensure these processes can continue or be quickly resumed after a disruption.

• Staff roles and responsibilities: Key personnel have been identified and trained on their responsibilities during a disruption. These roles are clearly defined and include backups in the event primary role holders are unavailable.

• Workspace recovery: In case our primary physical location is inaccessible, we have arrangements for an alternative workspace from where our operations can continue.

To ensure the ongoing effectiveness of these plans, we conduct regular reviews and updates to account for changes in our business environment or operations. Additionally, we perform periodic testing, including simulations and drills, to ascertain the preparedness of our team and the viability of the plans under various scenarios. We then use the insights gathered from these tests to refine our strategies and processes further.

In all these efforts, we aim to maintain the highest level of service availability and data protection, ensuring our clients' operations and our own remain resilient in the face of adversities.