Business Continuity & Disaster Recovery (BCP/DR) Policy

Effective Date: 01/02/2025
Approved By: President, KPG99 Inc.

---

1. Purpose

The purpose of this policy is to ensure that KPG99 Inc. can continue critical business operations and recover essential systems and data in the event of a disruption, disaster, or emergency. This policy establishes the framework for maintaining service continuity, minimizing downtime, and protecting client and company data.

---

2. Scope

This policy applies to all KPG99 Inc. offices, employees, contractors, and subcontractors involved in business operations, information systems, and service delivery. It covers all functions related to client services, recruiting operations, and data management, including both on-site and remote work environments.

---

3. Policy Statement

KPG99 Inc. is committed to maintaining operational resilience through well-defined business continuity and disaster recovery (BCP/DR) procedures. The organization will identify critical business processes, maintain backup systems, and ensure timely recovery in the event of any disruption to normal operations.

---

4. Objectives

The objectives of the BCP/DR Policy are to:

• Ensure uninterrupted delivery of critical services to clients.
• Protect and restore key business data and systems.
• Minimize financial and operational impact during disruptions.
• Define roles, responsibilities, and communication channels during emergencies.
• Comply with legal, contractual, and data protection requirements.

---

5. Business Continuity Planning

KPG99 Inc. maintains a Business Continuity Plan (BCP) that:

• Identifies critical business functions, dependencies, and acceptable downtime limits.
• Defines alternate work locations and communication procedures during emergencies.
• Includes contact lists for management, IT, clients, and emergency services.
• Provides for periodic testing, updates, and awareness training for all relevant employees.

All employees are required to familiarize themselves with the BCP to ensure preparedness during disruptions.

---

6. Disaster Recovery Planning

The Disaster Recovery (DR) Plan focuses on restoration of IT systems and data following a significant event such as hardware failure, cyber incident, or natural disaster.

Key DR measures include:

• Regular backups of critical systems and data.
• Secure, off-site or cloud-based storage for backups.
• Defined recovery time objectives (RTO) and recovery point objectives (RPO).
• System redundancy and encryption of all backups.
• Periodic testing to ensure successful recovery processes.

---

7. Communication and Escalation

• The Compliance & Operations Team will coordinate communication with clients, employees, and stakeholders.
• Incident updates and recovery timelines will be communicated regularly.
• Any client-affected event will be reported promptly in accordance with contractual requirements.

---

8. Roles and Responsibilities

• Executive Leadership: Oversight and resource allocation for BCP/DR programs.
• Compliance & Operations Team: Activation, coordination, and documentation of continuity procedures.
• IT Department: Management of technical recovery, system backups, and data restoration.
• Department Heads: Support execution of departmental continuity plans.
• All Employees: Follow assigned procedures and instructions during activation of the BCP/DR plan.

---

9. Testing and Maintenance

The BCP/DR plan is reviewed and tested at least annually to ensure effectiveness and alignment with changing business, client, and technology requirements. Test results and lessons learned are documented to enhance future preparedness.

---

10. Review

This policy will be reviewed annually to ensure ongoing relevance and compliance with applicable standards, client expectations, and operational best practices.

---

Approved and Authorized by:
Puneet Gulati
President, KPG99 Inc.
Date: 01/02/2025