The campus is required to develop and maintain a Business Continuity Program to ensure essential functions, systems and operations of the University can be resumed following a catastrophic event. The Business Continuity Program shall include a risk assessment, business impact analysis, business operation continuity plans, testing and exercise plans, communication strategy, and training guidelines for campus. The documentation is to follow structured plan maintenance, approval and record retention.
383.1 Business Continuity Program Committee
The University President has delegated responsibility for developing and maintaining the Business Continuity Program to the Business Continuity Planning Committee (BCPC). The BCPC will consist of a chair, co-chair, and senior administrative leaders who have a working knowledge of business continuity processes and are from units identified as key to essential operations. Campus Business Continuity Plans require review and approval by the BCPC.
383.2 Business Continuity Plan (BCP)
Departments essential to campus operations are required to develop and maintain a Business Continuity Plan. These include but are not limited to; Admissions and Recruitment, Contracts and Procurement, Facility Services, Disability Resource Center, Financial Aid, Fiscal Services, Food Services, Health and Counseling Services, Housing and Residential Life, Human Resources/Academic Personnel, Information Services, Instruction, Records (Office of the Registrar), Research and Economic Development, University Police, and University Scheduling. Departments deemed essential are reviewed annually by the BCPC and are posted on the Cal Poly Business Continuity website.
The BCP shall consist of: a directory of essential personnel and business contacts, a prioritized list of essential functions together with the essential staff, equipment and support activities identified for each function, lines of succession and delegations of authority, alternate operating facilities, procedures for safeguarding vital records, and testing and training exercises.
383.3 Business Impact Analysis
Units determined to provide essential functions are required to identify essential functions and workflow, determine the qualitative and quantitative impacts of a vulnerability or threat to essential functions, prioritize and establish recovery time objectives and, if appropriate, establish recovery point objectives.