Business Continuity & Disaster Recovery Policy

1. Purpose

This policy establishes Ten Points Education Limited’s (“Ten Points”) approach to business continuity and disaster recovery (BC/DR). Its purpose is to ensure that critical services remain available during disruption and can be restored within defined timeframes.

2. Scope

This policy applies to:

1. all critical business functions and IT systems operated by Ten Points;
2. all employees and contractors supporting these functions; and
3. all third parties whose services are required for continuity of operations.

3. Principles

1. Ten Points will maintain a documented Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP).
2. Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) will be defined and reviewed annually.
3. The Board of Directors has overall accountability for BC/DR, supported by the Information Security Officer (ISO).
4. BC/DR plans will be tested at least annually and after any major system change.
5. All staff must understand their responsibilities during an incident.
6. Critical suppliers must provide assurances of their own BC/DR capabilities.

4. Objectives

Ten Points commits to:

1. protect the safety of staff, students, and schools supported by our platform;
2. minimise disruption to essential services;
3. recover critical services within agreed timeframes;
4. communicate effectively with customers, suppliers, and regulators during incidents;
5. learn lessons from incidents and continuously improve resilience.

5. Roles & Responsibilities

1. Board of Directors – Approves policy and ensures resources are available.
2. Business Continuity Manager (ISO) – Maintains BC/DR plans, leads testing and updates.
3. Department Heads – Ensure staff understand their roles during disruptions.
4. All Staff – Must follow BCP procedures during incidents.

6. Plan Maintenance

1. The BCP and DRP are reviewed annually, or following significant organisational or technical change.
2. Test results and lessons learned feed into continuous improvement.
3. Copies of the BCP and DRP are maintained securely and accessible during outages.

Contact

Business Continuity Manager / Information Security Officer
Ten Points Education Limited
Email: [email protected]