Security Policies
      Back to home
      1. Help Centre
      2. Technical & Security
      3. Security Policies

      Business Continuity Plan

      Our Business Continuity Plan outlines how FMI Works will continue to operate during an unplanned service disruption

      This article is for IT and security professionals

      Overview

      Our Business Continuity Plan is reviewed and updated every 12 months.  The last time the Plan was tested was March 2020.

      Business impact assessment

      We assess and update the impact of a disruption on staff, physical sites, service provision and financial performance.

      Our assessment takes into account the following:

      • All systems are cloud-based, for availability and accessibility from anywhere.
      • All staff can work remotely and are not required to be in physical offices in order to be operational.
      • Our cloud provider is Microsoft Azure, which provides industry best availability and recovery options.  See High Availability/Disaster Recovery for more details. 

      IT systems assessment

      We assess and categorise our IT systems as follows:

      Business Critical Systems

      Without these systems we cannot perform day to day operations and service our customers.
      An example of a business critical system is O365.

      Business Convenience Systems

      These systems are used in the business and are convenient for operations, and we would seek to replace them when possible, but their absence would not materially affect our ability to service existing customers in the short term.
      An example of a business convenience system is Office Vibe.

      Personal Convenience Systems

      These are systems used that are convenient to individual employees in performing specific tasks in their role.
      An example of a personal convenience system is Paint.net.

      Plan activation

      In the case of an unplanned service disruption to all or part of the FMI business unit, the plan may be activated by a member of the FMI Leadership Team.

      A member of the FMI Leadership team will be designated as the Plan Manager, and will be responsible for managing all plan actions.

      Plan actions

      An action plan will be created that includes the following areas:

      1. Corporate Communication - Notification that the plan is being activated to the FMI leadership team and Corporate Services.
      2. Team Communication - Notification to team about the disruption and outline our response.
      3. Staff Safety - Check in with all staff individually to ensure physical safety and mental well being.
      4. Next of Kin Notifications - If applicable, notify family members of affected staff.
      5. Physical Premises - If physical premises have been affected, alert Corporate Sevices.
      6. Customer Communication - If applicable, notify customers of disruption and outline our response.
      7. Financial Implications - If applicable, initiate insurance claims and investigate financial assistance options.

      Plan scope

      This plan is limited to the applications and processes that are used internally by the FMI team in the provisioning of business services, such as Support and Sales. For information on the continuity of our SaaS applications, see High Availability/Disaster Recovery.