...

If you become aware of an imminent or active disaster that affects CloudCard, immediately contact the Managing Director or the Principal Engineer Customer Support team as soon as possible, via phone call if possible.

If a disaster has occurred, please contact your supervisor or the Customer Support team as soon as possible to let them know if you are safe.

Contents

...

Strategy for maintaining continuity of services:

Anchor
roles roles

Roles and Responsibilities

Revision History

Note - prior to April 2023, CloudCard had a Business Continuity Plan, which was separate from the Disaster Recovery Plan. At the end of March 2023, we merged the two plans as part of our SOC 2 Compliance preparations.

...

* Note - prior to April 2023, CloudCard had a Business Continuity Plan, which was separate from the Disaster Recovery Plan. At the end of March 2023, we merged the two plans as part of our SOC 2 Compliance preparations.

Anchor
appendices appendices

Appendices

Appendix: Disaster Recovery Strategies

...

1. If the disaster affects the Virginia region:

   1. consult news sources to gather information on impact of disaster

   2. If employee safety could be affected, immediately direct the Customer Support Team to follow the Appendix: Employee Safety Confirmation Process.

2. Check the CloudCard Internal Status Dashboard Attempt to log into CloudCard

3. Attempt to log into the AWS console

4. Check the CloudCard Internal Status Dashboard (an internal site which will be known to relevant employees which includes information on CloudCard system health and relevant AWS Status feeds)

   1. Determine if CloudCard systems are experiencing downtime

   2. Determine if AWS has published any notices.

5. Attempt to log into CloudCard

6. Attempt to log into the AWS console

7. Observe the state of the database and application environments:

   1. Are the major components (autoscaling functionality, RDS cluster) still operational?

   2. Is autoscaling and failover functioning normally and recovering the services?

   3. Is the service recovery trending towards normal within less than 15 minutes?

...

1. Review news from Google to determine timeline for restoration of services.

2. Update the CloudCard service updates page to indicate outage.

3. Customer Support team communicate with customers via HelpScoutActive Campaign.

4. As a last resort, if service is unlikely to be restored for a significant period, and other email providers are fine, set up temporary or permanent operations on a different email provider (Microsoft Office 365) and repoint DNS records.

HelpScout unavailable:

1. Review news from HelpScout to determine timeline for restoration of services.

2. Update the CloudCard service updates page to indicate outage.

3. Customer Support team communicate with customers via Google Workspaces Email.

4. As a last resort, if service is unlikely to be restored for a significant period, and other help desk providers are fine, set up temporary or permanent operations on a different helpdesk provider.

SquareSpace unavailable:

1. Review news from SquareSpace to determine timeline for restoration of services.Set up a simple html static site in S3 and repoint dns for the website to the static site

2. Update the CloudCard service updates page to indicate outage.

3. Customer Support team monitor HelpScout for customer questionscommunicate with customers via Google Workspaces Email.

   1. Log into the Google Support account and review emails with the Support label.

4. As a last resort, if service is unlikely to be restored for a significant period, and other website hosting provider help desk providers are fine, set up temporary or permanent operations on a different website hosting provider, or rebuild the website on the S3 static sitehelpdesk provider.

Sales / Accounting / Task Tracking / SquareSpace unavailable:

These services do not affect CloudCard’s immediate ability to serve customers. If they become unavailable, staff should use spreadsheets or manual systems to track information until the system comes back online. If the outage is likely to be prolonged, CloudCard should seek another service provider.

...

• The CloudCard office is unavailable

• Most employees home offices are affected by the disaster

• The entire region within at least 1 hour driving time of Downtown Lynchburg is affected by the disaster.

• Some locations within 12 8 hours driving time of Downtown Lynchburg are unaffected

• At least some employees can safely commute to an unaffected location.

...

• The CloudCard office is unavailable

• Most employees home offices are affected by the disaster

• The entire region within at least 12 8 hours driving time of Downtown Lynchburg is affected by the disaster.

• It is therefore impossible to find a location within 12 8 hours driving time of Downtown Lynchburg that is safe to work from, connected to the internet, and that at least some employees can commute to

...

Anchor
appendix_rpo_rto appendix_rpo_rto

Appendix: Asset RPO and RTO

Anchor
appendix_test-plan appendix_test-plan

Appendix: Test Plan

...