SanGrafix Business Continuity: Policy Statement & Implementation

This document presents the business continuity policy statement for SanGrafix, a video and gaming company. The policy aims to ensure the continuity of operations and business survivability during and after a move to a new location. It outlines the purpose and scope of the policy, covering all departments and employees in Sunnyvale and San Francisco. The policy emphasizes the importance of preparing comprehensive business continuity plans (BCP) and disaster recovery plans, referencing British Standard BS25999 and ISO 24673 for guidance. The document also details policy leadership, compliance verification processes, and penalties for non-compliance, highlighting the company's commitment to employee safety, operational continuity, and asset protection.

Running head: POLICY
POLICY
Name of the Student
Name of the University
Author Note

1POLICY
Business Continuity Policy Statement
Introduction
The SanGrafix is a video and gaming company which is committed towards
providing the best experience to the different customers as present in the gaming industry
and ensure that it has the best relationship with the different employees, suppliers as well
as the shareholders. Hence, to ensure that its initiative of starting business at a new
location is successful and it is able to remain consistent in its effort, the SanGrafix has
prepared the following business continuity policy statement for the aim of an overall
continuity of the operations and the business survivability.
The company is generally exposed to a large number of risks like any other
organization and with respect to this, it needs to be understood that adequate steps need to
be adopted so that the operations of the business are successfully. The main strategy of
SanGrafix to engage in the continuity of the business functions is to ensure the safety and
rest of employees, continuity of various business functions as well as the safe delivery
and networking of the gaming solutions, from the new site.
Purpose and Scope
The primary purpose of the Business continuity policy is to ensure that all the
business activities which will be carried out by the company will be kept at a normal or
near normal performance following the shift from the previous site to the new site which
may have a scope to have a negative impact on the overall operations of the firm at large.

2POLICY
The scope of the policy is aimed at the entire company, its employees, the subsidiaries as
well as their close associates who are present in Sunnyvale as well as in San Francisco.
Statement of Policy
Each of the departments as present in the SanGrafix, namely Accounting and Pay,
Sales and Marketing, Research and Development, Order processing, Shipping and
Receiving, General office management staff and the upper management along with
Customer relations and support along with the Technology Support are able to abide by
this particular policy.
Each of this given department will be required to prepare the current as well as
the comprehensive business continuity plans(BCP) with respect to which they will be
able to ensure that the overall operations of the business can be successfully carried out in
a sound manner. Departments like the Information tech ology will also be given the
responsibility with respect to the formation of a Disaster Recovery Plan which will then
ensure that no damage is caused to the critical assets of a firm and the shifting of the new
branch of the office can be easily carried out smoothly and the operations may be back to
regular as quickly as possible.
In addition to this, when each of the business departments will form a plan, it will
go under vigorous analysis and this will be followed by the approval and implementation
of the plans. The plans will comprise of the procedures as well as the support agreements
which will ensure that on time availability of the gaming and network along with
punctuality in the delivery of the same. However, it needs to be noted that the plans are
required to be reviewed on a continuous basis and hence, ensure that the business

3POLICY
continuity policy compliance procedure undergoes the evaluation of the Business
continuity Team.
The SanGrafix company has made an acknowledgement that it will be making use
of the British Standard named the BS25999 and under it the second part : 2008 as a
Guiding document and will assist in determining the right structure of the continuity of
the business. In addition to this, the SanGrafix has aimed to make use of the ISO 24673
standard in order to support the departments in forming the disaster recover activities as
well as the policies.
San Grafix realizes the importance of a Business Continuity Plan as well as a
program in order to ensure the overall safety as well as the health and continuity of the
different operations of a business. The employees form the primary concern of the
different organizations and hence, with respect to this, it is important for the organization
to ensure that they do not face any specific difficulties.
San Grafix is requesting long term commitment from each of the employees,
vendors as well as the departments so as to assist the company in attaining the overall
mission and survivability along with protecting the assets of the company.
Policy Leadership
Mr. XYZ, has been appointed as the executive who will be responsible to look
after the Business continuity program of San Grafix. All the issues as faced with respect
to the Business continuity plan, along with its resolutions in the development of the
Business continuity policy and plans will be first managed by the Business Continuity
team and the appropriate management pertaining to the internal as well as the external
organizations, before it is submitted to the corporate management executive who has

4POLICY
been appointed. The manner in which the issue will be resolved will be stated in the
following section.
Verification of Policy Compliance
The compliance verification of the Business continuity will be largely managed
by the team as responsible along with adequate amount of assistance as received from the
different internal departments as present. The staffing, networking requirements,
procedures as well as the planning activities will be required to meet the regulatory
compliances and in the same manner, the plan templates will be designed accordingly to
development procedure and this rule will be applied to all the plans being made.
The Business continuity compliance verification is required to be done annually
and is generally facilitated by the team. There also exist certain waivers for the temporary
compliance verification procedure and may be given in written request by the particular
manager of the department and approved by the Business continuity team. The
maximum delay which can take place is with respect to one year from the original date of
the compliance.
Penalties for Non-Compliance
In situations where the company departments are unable to comply by the same, a
brief stating the noncompliance will be submitted to the liaison for a resolution. Failure to
do so will result in reprimands which can be verbal in nature. In severe cases, it may also
result in notes in personnel files and termination.

5POLICY
Bibliography
Caruana, A. (2016). A business continuity plan maturity index: a comparative study of
Maltese licensed financial services firms (Bachelor's thesis, University of Malta).
Ferguson, C. (2018). Business continuity and disaster management within the public
service in relation to a national development plan. Journal of business continuity
& emergency planning, 11(3), 243-255.
Hassan, N., Leong, L. C., & Isa, F. M. (2018). The Development of Business Continuity
Plan for Online Delivery: A Case Study in Malaysian Private Higher Learning
Institution. Advanced Science Letters, 24(11), 7996-7999.
Olson, A., & Anderson, J. (2016). Resiliency scoring for business continuity
plans. Journal of business continuity & emergency planning, 10(1), 31-43.
Sadgrove, K. (2016). The complete guide to business risk management. Routledge.