Business Continuity & Backup Statement

13. Business Continuity & Backup Statement

Document Name: Business Continuity & Backup Statement
Version: 1.0
Approved by: Directors, Immercial Limited
Review Frequency: Annual or upon material change

13.1 Purpose

This statement defines Immercial Limited’s approach to maintaining continuity of services and protecting critical information in the event of disruption.

It supports ISO 27001 requirements and reflects a proportionate, cloud-first approach appropriate to a specialist micro-company consultancy.

13.2 Business Continuity Approach

Immercial operates primarily through digital, cloud-based systems. Business continuity is achieved through flexibility, redundancy, and the ability to operate remotely without reliance on a single physical location.

Continuity planning focuses on ensuring that:

• Consultancy services can continue with minimal interruption

• Information assets remain accessible and secure

• Client commitments can be met where reasonably practicable

13.3 Key Continuity Measures

Immercial’s continuity measures include:

• Use of secure cloud storage and collaboration platforms

• Remote working capability as standard

• Access to systems from multiple locations

• Minimal dependency on physical infrastructure

• Defined access controls and authentication measures

13.4 Backup Arrangements

• Business-critical data is stored in cloud environments with built-in backup and redundancy.

• Backups are managed by reputable cloud service providers.

• Access to backup data is restricted to authorised users only.

• Backup effectiveness is reviewed periodically as part of system review activities.

13.5 Disruption Scenarios

Examples of scenarios considered include:

• Loss or failure of an end-user device

• Temporary loss of internet connectivity

• Cloud service disruption

• Cyber or information security incidents

• Local environmental or infrastructure disruption

Responses are proportionate to the severity and nature of the disruption.

13.6 Roles & Responsibilities

Senior management is responsible for:

• Ensuring appropriate continuity and backup arrangements are in place

• Assessing continuity risks

• Coordinating response actions where disruption occurs

13.7 Integration with IMS

Business continuity and backup arrangements are considered as part of:

• Information security risk assessments

• Incident management activities

• Management review processes

13.8 Review & Improvement

This statement is reviewed at least annually or following a significant disruption to ensure continued suitability and effectiveness.