Purpose:
This policy outlines the process and frequency for testing Speak AI’s Business Continuity Plan (BCP) to ensure ongoing resilience, operational continuity, and preparedness for potential disruptions.
Scope:
This policy applies to all critical business operations and functions within Speak AI and its infrastructure providers, including Amazon Web Services (AWS), MongoDB, and external service providers like OpenAI and Anthropic.
Policy Statement:
Speak AI’s Business Continuity Plan will be tested on an annual basis to ensure its effectiveness in maintaining business operations in the event of disruptions or emergencies. In addition to scheduled annual testing, the plan may be reviewed and updated as needed, based on significant changes to the business environment, technology infrastructure, or service providers.
Testing Objectives:
Validate the procedures to ensure the swift resumption of critical business processes.
Identify and address gaps or areas of improvement in the plan.
Ensure staff familiarity with BCP procedures, roles, and responsibilities.
Evaluate Speak AI's response to simulated real-world incidents, including external provider failures (e.g., AWS, MongoDB).
Testing Schedule:
Annual Test:
An annual BCP test will be conducted, with scenarios designed to simulate different types of operational disruptions (e.g., data center failure, service outage). This test will include all critical stakeholders and relevant external service providers.
Review and Update:
The BCP will also be reviewed in the event of significant changes to the infrastructure, providers, or business operations. Any changes will be communicated to the necessary employees and stakeholders.
Documentation and Reporting:
All BCP test results will be documented, and any gaps identified will be addressed with corrective actions. The test outcomes and action plans will be reviewed by the executive team and external auditors, if applicable.
Responsibility:
The Chief Technology Officer is responsible for ensuring the BCP testing schedule is followed and any updates are implemented promptly. Relevant teams and third-party providers will be involved in testing and remediation efforts.