At a glance
NEXT AI maintains a structured Business Continuity Plan (BCP) to keep essential operations running during vendor or service outages. The plan is tested regularly, tracks key suppliers & contingencies, and includes worksite recovery so operations continue even if a location is unavailable.
How does business continuity plan work
Governance & succession: The Security Officer and Privacy Officer maintain the plan; executive leadership is kept informed. CEO oversees safety & execution; CTO leads technical recovery; Business Operations Lead is the named successor if needed.
Remote-only worksite recovery: As a remote-only organization, personnel work from home or relocate to any internet-connected location until recovery is complete.
Response teams: DevOps (cloud apps/platforms) and Security (cyber incidents) coordinate continuity and support recovery.
Suppliers & contingencies: The plan identifies key suppliers and outlines contingency paths for service outages.
Testing & improvement: The BCP is simulated/tested at least annually; metrics are captured and improvements tracked.
Customer communication: NEXT maintains a public status page to provide real-time service updates during events.
Standards alignment
The program follows ISO 22301 principles for establishing and operating a business continuity management system (BCMS).
Related topics
Disaster recovery (RTO/RPO & recovery phases)
FAQ
Q: How often is the Business Continuity Plan tested?
At least annually, with exercises that validate processes and feed measured improvements.
Q: Who owns the plan and decision-making during a disruption?
The plan is maintained by the Security Officer and Privacy Officer; CEO (safety/execution) and CTO (technical recovery) lead, with a defined succession if either is unavailable.
Q: What does “worksite recovery” mean for a remote-only company?
Employees continue from home or relocate to any secure internet-connected location; operations don’t depend on a single office.
Q: How will NEXT AI communicate during outages?
Via the public status page with near-real-time updates about service components and recovery progress.
Q: How does Business Continuity relate to Disaster Recovery (DR)?
BC focuses on keeping business functions running (people, suppliers, comms). DR focuses on restoring IT services (RTO/RPO, recovery phases). Structure and definitions are consistent with NIST SP 800-34.
Q: Which frameworks does your continuity approach align to?
Continuity aligns with ISO 22301; recovery outcomes map to NIST Cybersecurity Framework 2.0 – Recover function.