{"entity":"Acme Supplies SRL","version":"2026.1","effective_date":"2026-02-15","next_review":"2027-02-15","scope":{"systems_in_scope":["ERP (Sage)","CRM (HubSpot)","Warehouse Management (internal WMS)","Email and collaboration (Microsoft 365)","Website and e-commerce storefront","Financial systems and invoice archive"]},"objectives":[{"system":"ERP (Sage)","rto_hours":4,"rpo_hours":1},{"system":"CRM (HubSpot)","rto_hours":8,"rpo_hours":4},{"system":"Warehouse Management","rto_hours":2,"rpo_hours":0.5},{"system":"Microsoft 365","rto_hours":8,"rpo_hours":4},{"system":"Website / e-commerce","rto_hours":4,"rpo_hours":1},{"system":"Financial systems","rto_hours":24,"rpo_hours":24}],"incident_categories":[{"category":"Data centre outage — Brussels primary","likelihood":"medium","impact":"high","scenarios":["Extended power failure (>4h)","Fire or physical damage to rack","Core network failure isolating the site"]},{"category":"Ransomware / destructive malware","likelihood":"medium","impact":"high","scenarios":["Encryption of production file shares","Compromise of backup infrastructure","Lateral movement into payment systems"]},{"category":"SaaS provider outage","likelihood":"high","impact":"medium","scenarios":["Microsoft 365 regional outage","HubSpot multi-hour downtime","Sage cloud availability degradation"]},{"category":"Pandemic / workforce unavailability","likelihood":"low","impact":"high","scenarios":["Office closure requiring full remote operations","Key personnel simultaneously unavailable"]},{"category":"Logistics disruption","likelihood":"medium","impact":"medium","scenarios":["Warehouse access blocked by fire or flood","Primary carrier network failure"]}],"recovery_strategies":[{"system":"ERP (Sage)","primary_site":"Brussels DC","dr_site":"Antwerp DC","recovery_procedure_summary":"Sage is deployed active/passive across Brussels and Antwerp with 5-minute replication; DR failover promotes the Antwerp replica, updates DNS TTL=60, and re-points finance workstations via VPN profile B.","responsible_team":"IT Operations"},{"system":"CRM (HubSpot)","primary_site":"HubSpot EU","dr_site":"N/A (SaaS)","recovery_procedure_summary":"SaaS — rely on HubSpot SLA. Nightly CSV export retained for 30 days enables manual operation for 24h in extremis.","responsible_team":"Sales Operations"},{"system":"Warehouse Management","primary_site":"Brussels DC","dr_site":"Antwerp DC","recovery_procedure_summary":"Active/active deployment with distributed cache; either site can service both warehouses. Failover is automatic at the load balancer.","responsible_team":"IT Operations + Warehouse Ops"},{"system":"Microsoft 365","primary_site":"Microsoft EU","dr_site":"N/A (SaaS)","recovery_procedure_summary":"SaaS — rely on Microsoft SLA. Backups via Veeam for M365 retained 3 years. Alternative communication: WhatsApp broadcast and pre-agreed Signal group.","responsible_team":"IT Operations"},{"system":"Website / e-commerce","primary_site":"Brussels DC","dr_site":"Cloudflare edge + AWS Ireland warm standby","recovery_procedure_summary":"Warm standby with database read-replica in AWS ireland. DR failover requires DNS cutover via Cloudflare and database promotion — scripted, ~25-minute RTO.","responsible_team":"Engineering"},{"system":"Financial systems","primary_site":"Brussels DC","dr_site":"Antwerp DC + encrypted offsite backup (Iron Mountain)","recovery_procedure_summary":"Nightly encrypted backup replicated to Antwerp and a tape-vault copy to Iron Mountain kept for 7 years per BE commercial-law retention. Recovery from tape is the last-resort path.","responsible_team":"Finance + IT Operations"}],"communication_plan":{"internal_stakeholders":["Managing Director (Isabelle Durand)","CISO/DPO (Marie Laurent)","Head of Finance","Head of Sales","All-staff broadcast via Slack #incidents and email"],"external_stakeholders":["Primary customers (top 20 by revenue) via account managers","Key suppliers via procurement team","APD/GBA where GDPR breach applies","Insurer (AXA Belgium) within the 48h contractual notice window"],"media_contact":"Isabelle Durand, Managing Director — media inquiries routed to the MD's office; no other spokesperson authorised during an active incident."},"testing_schedule":[{"exercise_type":"tabletop","frequency":"Quarterly","last_test_date":"2026-02-10","result_summary":"Ransomware-tabletop with executive team; identified gap in legal-counsel on-call rotation, now closed."},{"exercise_type":"partial_failover","frequency":"Semi-annual","last_test_date":"2025-11-18","result_summary":"WMS partial failover Brussels→Antwerp; RTO achieved 47 minutes (target 2h). Found stale DNS TTL config on one firewall rule."},{"exercise_type":"full_failover","frequency":"Annual","last_test_date":"2025-09-06","result_summary":"ERP full failover; RTO 3h 42m (target 4h). Finance team confirmed 7-day parallel run before declaring successful recovery."}],"bcp_coordinator":{"name":"Marc Dewinter","contact":"marc.dewinter@acme-supplies.eu / +32 2 123 45 70"},"approvals":[{"approver_name":"Isabelle Durand","approver_title":"Managing Director","date":"2026-02-15"},{"approver_name":"Marie Laurent","approver_title":"CISO/DPO","date":"2026-02-14"}]}