Business Continuity Management (BCM)
In order to ensure that in the face of major accidents such as natural disasters, digital threats and infectious disease outbreaks, Taiwan (Taiwan) Ltd. can still provide customers with complete and uninterrupted services, we has established a Business Continuity Management (BCM) mechanism to maintain important operational projects and resume normal operations as soon as possible, mitigate the impact of disasters and operational interruption time, protect the rights and interests of customers and shareholders, and increase the competitiveness of enterprises.
Risk Assessment (RA)
Business Impact Analysis (BIA)
The aim is to identify operational shocks (i.e., losses or interruptions) when operations are unsustainable, and the minimum acceptable level of continuity, so as to provide a clear understanding of the key operations and processes in the organization, as well as the requirements required to support these processes, in order to assist in assessing the time and resources required for recovery.
Natural disasters
Natural disasters such as fires, earthquakes, and typhoons in the workplace have led to the destruction of the premises of operations, and the loss of important documents and computer equipment due to the inability to evacuate in time.
Digital threats
If it suffers from various network attacks, it may cause the system to be suspended, the system to be remotely manipulated, the database to be damaged, the network to be interrupted, the customer data to be tampered with or stolen, the privacy of customers and employees to be exposed, and the service contract to be violated, resulting in major losses to the company.
Large-scale infectious diseases
When a major infectious disease occurs, it may be due to the impact of endangering the health of employees, causing a lack of human resources, or spreading the premises that will prevent continuous operations or provide customer service.
Minimize Resource Requirement (MRR)
Assess the redundancy resources required to recover to the minimum acceptable level of operations.
MTPD & RTO
For stable quality of service, we have a " Maximum Tolerable Period of Disruption (MTPD)" of 1 day and a recovery time point of operations within 30 minutes of Recovery Time Object (RTO).
Business Continuity Plan
In view of reasonable operational continuity objectives, the formulation of a supporting continuity plan can effectively reduce the operational impact in the event of a major accident.
Redundancy Mechanism
Workplace
The backup workplace is based on "work from home "
Communication Device
Adopt communication equipment required for long-distance work.
Hardware
The backup computer with access control equipment.
Start the home office backup system and network connection according to the procedure.
Software
Because the supplier's operating software is remotely controlled with License, it will not be affected by major accidents. However, in order to ensure that the technical support department can respond to the needs of the manufacturer in the shortest possible time, it will still be backed up on the backup laptop.
Personnel
The BCP's commander-in-chief is responsible for planning, initiating and terminating the BCP. The department manager is responsible for grasping the implementation status of the BCP in each department, and communicating the message and report to the BCP commander-in-chief. In addition, each department must designate a person who is responsible for periodically modifying and reviewing the BCP of the department, and must report the status, progress and problems to the department manager after the BCP is launched.
Key Documents
1、Make a correct and complete backup of the data, in addition to storing it in the workplace, also scan and archive it to the standby computer/hard disk, and set the retention period of the file or data according to the data attributes.
2、Important documents and seals must be stored in a fireproof box to facilitate evacuation from the office.
Supplier
1、Confirm that the supplier also has a BCM and can implement the BCP.
2、Confirm the contact window and support method for us when BCP is launched.
3、Consider supply chain risks and choose a suitable second supplier.
4、Continuously seek and provide better communication system solutions to meet market demand.
Call Tree
- In order to ensure that the telephone list of all company personnel is the most up-to-date and correct information, if there is any personnel change, it needs to be updated and reviewed regularly.
- All departments need to set up their own Line groups in order to smoothly deliver messages and successfully launch and execute BCP.
- Notification mechanism: In the event of a major accident, the BCP Commander-in-Chief will notify all employees by telephone and ask them to respond to their status (safety, illness or injury) when they receive the call, and whether they can implement BCP.
