OSAM Websites
(Outsourced Sales & Marketing Limited)

1. Purpose

This Business Continuity Policy outlines the framework OSAM Websites follows to ensure the ongoing availability, security, and resilience of its services. As our domain names, servers, and infrastructure are managed by third-party providers, this policy focuses on risk mitigation, service continuity, and response strategies in the event of disruptions.

2. Scope

This policy applies to all services offered by OSAM Websites, including:

• Website development
• Hosting management
• Domain name registration

It also covers internal processes and customer support operations.

3. Business Continuity Objectives

• Ensure minimal disruption to client services in the event of an incident.
• Maintain transparent communication with clients regarding service disruptions.
• Establish contingency plans to address third-party service failures.
• Regularly assess third-party providers for reliability and security.

4. Risk Management & Third-Party Dependencies

Since OSAM Websites relies on external providers for domain names, servers, and other services, our risk management strategy includes:

• Partnering with reputable third-party providers with strong uptime guarantees and redundancy measures.
• Monitoring the status and performance of third-party services.
• Maintaining access to alternative providers in case of extended outages.
• Regularly reviewing Service Level Agreements (SLAs) with providers to ensure compliance.

5. Incident Response & Recovery

In the event of service disruptions due to third-party failures, OSAM Websites will:

• Identify & Assess – Monitor and confirm the nature of the outage or disruption.
• Notify Affected Clients – Provide timely updates via email, website notifications, or social media.
• Liaise with Third-Party Providers – Work with providers to restore services as quickly as possible.
• Implement Workarounds – If feasible, deploy alternative solutions to minimize downtime.
• Post-Incident Review – Analyze the cause and impact of the disruption to improve future resilience.

6. Data Protection & Security

• Client data security is maintained through third-party providers’ compliance with industry security standards (e.g., ISO 27001, GDPR).
• OSAM Websites ensures that all providers have backup and disaster recovery plans in place.
• Secure authentication and access controls are used to protect accounts and services.

7. Communication Plan

• Clients will be informed of critical service disruptions via official communication channels.
• Affected customers will receive regular updates until normal operations are restored.
• A post-incident report will be available upon request.

8. Review & Updates

This policy is reviewed upon significant changes in business operations or service provider agreements.

Effective Date: 13/02/2025

Reviewed By: Zak Guy