Business continuity
Plans with recovery objectives, tested against the live platform; incidents closed by the accountable executive
Each plan names the function, its recovery time and point objectives and the strategy. Tests read the platform: devices and feeds for the warning chain, the evidence chain after a restore, the payment run file, the correspondence export. An incident is assessed against the RTO and closed only by the accountable executive with lessons (GL-GA-08).
Plans
| Ref | Function | Service | RTO / RPO | Owner | Strategy | Last test | Result | Next test | |
|---|---|---|---|---|---|---|---|---|---|
| BC-01 | Flood warning chain | MG-10 | 1 h / 0.25 h | Director, emergency and recovery | Second gateway; external feeds as fallback; controller can issue from a phone. | 26/02/2026 | PASS | 26/02/2027 | |
| BC-02 | Evidence chain and records | Platform | 4 h / 1 h | Chief information officer | Hourly snapshot; restore and verify the chain. | 10/08/2025 | PASS | 10/08/2026 | |
| BC-03 | Payment runs | MG-03 | 24 h / 24 h | Director, payments | Re-run from the last run's file; bank file re-submission. | never | 14/10/2026 | ||
| BC-04 | Correspondence and ministerials | MG-14 | 72 h / 24 h | Chief of staff | Manual register export; sign on paper. | 16/06/2026 | PASS | 16/06/2027 |
Incidents
CI-2026-04 · Flood warning chain · started 11/09/2026, 7:15:07 am, recovered 11/09/2026, 9:45:07 am
LoRaWAN gateway at Fallon Junction lost power; three gauges silent. Impact: Two and a half hours without upstream readings during a rain event; external feeds covered the gap.
RECOVERED