NNPCL GRC_Business Continuity Proccesses_Business Continuity.pdf

NNPC Limited Investigation Processes and Procedures 2 Business Continuity Policy 2.1 Scope The scope of this policy covers the critical services of the organization’s business operations, IT applications/systems, supply chain, offices, departments, and divisions including all the infrastru...

NNPC Limited Investigation Processes and Procedures 2 Business Continuity Policy 2.1 Scope The scope of this policy covers the critical services of the organization’s business operations, IT applications/systems, supply chain, offices, departments, and divisions including all the infrastructure, facilities, subsidiaries, and all channels of business transactions involving the company. As such, this policy applies to all NNPC staff, stakeholders, suppliers/vendors, outsourcing partners, facilities, equipment, and other assets, communication, and technology systems at all NNPC locations. NNPC shall be prepared for scenarios including, but not limited to natural disasters, power outages, hardware/telecommunications failures, data NNPC Limited Investigation Processes and Procedures corruption, pandemics, political unrest, labour strikes, sabotage, explosions, and chemical hazards. These events may be local, rendering only a single NNPC facility inaccessible, or could have regional or nationwide impact, with multiple NNPC facilities becoming inaccessible. This policy guides the resumption and recovery of time-sensitive operations and services following pre-established timeframes as well as ensuring that adequate plans are in place for the less time-sensitive operations. 2.2 Objectives of Business Continuity Management The objectives of Business Continuity Management are to:  Properly identify, evaluate, record, and manage risks to people and the business  Protect NNPC and build in adequate levels of prevention and resilience, mitigating the impact of a potential disaster or other disruptions to business operations.  Protect and support NNPC employees, assets, and business in the event of a disruption to normal operations and resume critical services and support functions.  Identify, quantify, and mitigate financial losses related to business interruptions or loss of assets.  Mitigate impairment of public image related to implied negligence or failure to act. NNPC Limited Investigation Processes and Procedures  Resume normal business activities within the best possible timeframe to meet business, client, and regulatory, contractual, and legal requirements in the areas of BCM.  Provide awareness on business continuity to all employees and wherever applicable to relevant external parties like sub-contractors, consultants, suppliers, vendors, and such programs are periodically evaluated for relevance and effectiveness.  Ensure that BC plans are regularly tested and updated to meet the changing needs of the company.