{ "$schema": "./business-continuity-plan-schema.json", "schemaVersion": "1.0.0", "planId": "BCP-EXAMPLE-001", "title": "Juniper Ridge Services aggregate business continuity plan", "status": "approved-current", "version": "1.0.0", "dates": { "createdAt": "2026-07-10", "approvedAt": "2026-08-01", "effectiveAt": "2026-08-01", "expiresAt": "2026-11-01", "nextReviewAt": "2026-10-15" }, "approval": { "approvedByRoleId": "ROLE-CONTINUITY-AUTHORITY", "scope": "continuity-plan-governance-only", "approvesRecoveryTargets": false, "notes": "Approval confirms this fictional plan version and continuity operating boundary only." }, "planOwnerId": "ROLE-CONTINUITY-OWNER", "activationAuthorityId": "ROLE-CONTINUITY-AUTHORITY", "roles": [ { "id": "ROLE-CONTINUITY-OWNER", "role": "Continuity plan owner", "responsibility": "Maintains the approved plan, evidence register, exercises, gaps, and revisions.", "authorityBoundary": "May propose plan revisions but cannot activate the plan or approve recovery targets.", "directoryRef": "directory://role/continuity-plan-owner" }, { "id": "ROLE-CONTINUITY-AUTHORITY", "role": "Continuity activation authority", "responsibility": "Makes the human activation, deactivation, and return-to-normal decisions for this plan.", "authorityBoundary": "Authority is limited to continuity operating decisions and excludes incident command, risk acceptance, and recovery-target approval.", "directoryRef": "directory://role/continuity-activation-authority" }, { "id": "ROLE-SERVICE-OPERATIONS", "role": "Service operations owner", "responsibility": "Owns minimum aggregate intake and scheduling operations during continuity activation.", "authorityBoundary": "May report function status and use approved arrangements after activation; cannot restore IT services.", "directoryRef": "directory://role/service-operations-owner" }, { "id": "ROLE-FINANCE-OPERATIONS", "role": "Finance operations owner", "responsibility": "Owns minimum aggregate reconciliation operations and supplier-capability review.", "authorityBoundary": "May hold unresolved aggregate exceptions; cannot approve supplier terms, risk, or recovery targets.", "directoryRef": "directory://role/finance-operations-owner" }, { "id": "ROLE-COMMUNICATIONS-COORDINATOR", "role": "Continuity communications coordinator", "responsibility": "Coordinates role-group status messages through reserved channels and review requirements.", "authorityBoundary": "May coordinate approved aggregate status updates; cannot issue legal notices or incident-command instructions.", "directoryRef": "directory://role/continuity-communications-coordinator" }, { "id": "ROLE-IT-RECOVERY-OWNER", "role": "IT recovery handoff owner", "responsibility": "Owns the separate disaster-recovery evidence and restoration handoff.", "authorityBoundary": "Owns IT restoration outside this plan; does not make the continuity activation or return decision.", "directoryRef": "directory://role/it-recovery-owner" } ], "succession": [ { "order": 1, "roleId": "ROLE-CONTINUITY-AUTHORITY", "authorityScope": "Continuity activation, deactivation, and return-to-normal decisions for this plan only.", "effectiveAt": "2026-08-01", "expiresAt": "2026-11-01" }, { "order": 2, "roleId": "ROLE-CONTINUITY-OWNER", "authorityScope": "Continuity decisions only when the primary authority is unavailable and the separate delegation record is current.", "effectiveAt": "2026-08-01", "expiresAt": "2026-11-01" }, { "order": 3, "roleId": "ROLE-SERVICE-OPERATIONS", "authorityScope": "Hold or escalate continuity operations when both preceding roles are unavailable; activation still requires an authorized decision record.", "effectiveAt": "2026-08-01", "expiresAt": "2026-11-01" } ], "scope": { "organization": "Fictional Juniper Ridge Services shared operations", "disruptionBoundary": "Loss of the normal workplace or normal business capability, assessed without assigning incident cause or selecting IT restoration procedures.", "includedFunctionIds": [ "EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION" ], "excludedWork": [ "Business impact analysis, consequence estimation, and recommendation of MTD, RTO, or RPO values", "Approval of recovery targets, IT restoration strategies, backup or restore evidence, and disaster-recovery procedures", "Threat detection, investigation, evidence preservation, containment, eradication, notification, and incident command", "Exact execution steps, technical commands, credentials, emergency contacts, sensitive facility details, and private supplier details", "Risk acceptance or treatment, project delivery, investment approval, legal or compliance determinations, readiness certification, and outcome promises" ] }, "evidenceSources": [ { "id": "SOURCE-APPROVED-BIA", "title": "Aggregate approved BIA input register", "kind": "approved-input-register", "classification": "observed", "confidence": "high", "sourceRef": "evidence://example/bia/approved-input-register-v2", "evidenceDate": "2026-07-28", "reviewBy": "2026-10-15", "containsSensitiveData": false }, { "id": "SOURCE-RESOURCE-REVIEW", "title": "Aggregate minimum resource review", "kind": "aggregate-owner-review", "classification": "inferred", "confidence": "medium", "sourceRef": "evidence://example/continuity/minimum-resource-review", "evidenceDate": "2026-07-25", "reviewBy": "2026-09-30", "containsSensitiveData": false }, { "id": "SOURCE-WORK-METHOD-REVIEW", "title": "Authorized alternate work method review", "kind": "aggregate-owner-review", "classification": "observed", "confidence": "medium", "sourceRef": "evidence://example/continuity/alternate-method-review", "evidenceDate": "2026-07-24", "reviewBy": "2026-09-30", "containsSensitiveData": false }, { "id": "SOURCE-COMMUNICATIONS-REVIEW", "title": "Aggregate continuity communications review", "kind": "aggregate-owner-review", "classification": "inferred", "confidence": "medium", "sourceRef": "evidence://example/continuity/communications-review", "evidenceDate": "2026-07-26", "reviewBy": "2026-09-30", "containsSensitiveData": false }, { "id": "SOURCE-SUPPLIER-ASSUMPTION", "title": "Fictional aggregate supplier capability statement", "kind": "aggregate-supplier-assumption", "classification": "assumed", "confidence": "low", "sourceRef": "evidence://example/supplier/aggregate-capability-statement", "evidenceDate": "2026-07-20", "reviewBy": "2026-08-31", "containsSensitiveData": false } ], "approvedBiaInputs": [ { "id": "BIAREF-CLIENT-INTAKE", "functionId": "EF-CLIENT-INTAKE", "sourceRef": "evidence://example/bia/approved-client-intake-v2", "approvalState": "approved-outside-plan", "approvedAt": "2026-07-28", "importedAt": "2026-07-29", "sourceIds": ["SOURCE-APPROVED-BIA"], "confidence": "high", "containsTargetValues": false }, { "id": "BIAREF-SERVICE-SCHEDULING", "functionId": "EF-SERVICE-SCHEDULING", "sourceRef": "evidence://example/bia/approved-service-scheduling-v2", "approvalState": "approved-outside-plan", "approvedAt": "2026-07-28", "importedAt": "2026-07-29", "sourceIds": ["SOURCE-APPROVED-BIA"], "confidence": "high", "containsTargetValues": false }, { "id": "BIAREF-PAYMENT-RECONCILIATION", "functionId": "EF-PAYMENT-RECONCILIATION", "sourceRef": "evidence://example/bia/approved-payment-reconciliation-v2", "approvalState": "approved-outside-plan", "approvedAt": "2026-07-28", "importedAt": "2026-07-29", "sourceIds": ["SOURCE-APPROVED-BIA"], "confidence": "high", "containsTargetValues": false } ], "activation": { "decisionState": "requires-human-decision", "authorityRoleId": "ROLE-CONTINUITY-AUTHORITY", "selfActivates": false, "criteria": [ { "id": "ACTIVATE-NORMAL-WORK-UNAVAILABLE", "condition": "The normal work environment cannot support at least one included essential function at its minimum operating level.", "evaluatorRoleId": "ROLE-CONTINUITY-AUTHORITY", "requiredEvidence": "Aggregate function-status record and affected capability references.", "decisionRecommendation": "activate" }, { "id": "ACTIVATE-EVIDENCE-INCOMPLETE", "condition": "Available aggregate evidence is insufficient to distinguish a short interruption from a continuity event.", "evaluatorRoleId": "ROLE-CONTINUITY-OWNER", "requiredEvidence": "Current aggregate function and dependency status from accountable role owners.", "decisionRecommendation": "hold" }, { "id": "ACTIVATE-AUTHORITY-UNAVAILABLE", "condition": "The primary authority is unavailable or the delegation record is expired or unresolved.", "evaluatorRoleId": "ROLE-CONTINUITY-OWNER", "requiredEvidence": "Current succession and delegation references without personal contact data.", "decisionRecommendation": "escalate" } ], "currentActivation": { "status": "not-activated", "activatedAt": null, "authorizedByRoleId": null, "activationRecordRef": null } }, "essentialFunctions": [ { "id": "EF-CLIENT-INTAKE", "name": "Client intake", "ownerRoleId": "ROLE-SERVICE-OPERATIONS", "successionRoleIds": ["ROLE-CONTINUITY-OWNER", "ROLE-CONTINUITY-AUTHORITY"], "approvedBiaRefId": "BIAREF-CLIENT-INTAKE", "priority": 1, "minimumOperatingLevel": "Accept and route aggregate priority service requests during the published service window.", "continuityMethodIds": ["METHOD-REMOTE-INTAKE"], "locationIds": ["LOCATION-DISTRIBUTED-A"], "resourceIds": [ "RESOURCE-SERVICE-COVERAGE", "RESOURCE-AUTHORIZED-DEVICE", "RESOURCE-CURRENT-RECORDS" ], "supplierDependencyIds": [], "recordsSafeguardIds": ["SAFEGUARD-SERVICE-RECORDS"], "communicationIds": ["COMMUNICATION-TEAM-STATUS", "COMMUNICATION-LEADERSHIP-STATUS"], "statusCadenceId": "CADENCE-SERVICE-60", "restorationHandoffCriteria": "The IT recovery owner provides an authorized service-restoration evidence reference for review.", "returnToNormalSequence": 2 }, { "id": "EF-SERVICE-SCHEDULING", "name": "Service scheduling", "ownerRoleId": "ROLE-SERVICE-OPERATIONS", "successionRoleIds": ["ROLE-CONTINUITY-OWNER", "ROLE-CONTINUITY-AUTHORITY"], "approvedBiaRefId": "BIAREF-SERVICE-SCHEDULING", "priority": 2, "minimumOperatingLevel": "Allocate accepted aggregate priority work to an available service window.", "continuityMethodIds": ["METHOD-ALTERNATE-SCHEDULING"], "locationIds": ["LOCATION-DISTRIBUTED-A", "LOCATION-AUTHORIZED-B"], "resourceIds": [ "RESOURCE-SERVICE-COVERAGE", "RESOURCE-AUTHORIZED-DEVICE", "RESOURCE-CURRENT-RECORDS", "RESOURCE-ALTERNATE-WORKSPACE" ], "supplierDependencyIds": [], "recordsSafeguardIds": ["SAFEGUARD-SERVICE-RECORDS"], "communicationIds": ["COMMUNICATION-TEAM-STATUS", "COMMUNICATION-LEADERSHIP-STATUS"], "statusCadenceId": "CADENCE-SERVICE-60", "restorationHandoffCriteria": "The IT recovery owner provides authorized scheduling-service evidence and the function owner confirms the minimum aggregate view.", "returnToNormalSequence": 1 }, { "id": "EF-PAYMENT-RECONCILIATION", "name": "Payment reconciliation", "ownerRoleId": "ROLE-FINANCE-OPERATIONS", "successionRoleIds": ["ROLE-CONTINUITY-OWNER", "ROLE-CONTINUITY-AUTHORITY"], "approvedBiaRefId": "BIAREF-PAYMENT-RECONCILIATION", "priority": 3, "minimumOperatingLevel": "Compare aggregate settlement totals and retain unresolved exceptions for authorized review.", "continuityMethodIds": ["METHOD-DEFERRED-RECONCILIATION"], "locationIds": ["LOCATION-AUTHORIZED-B"], "resourceIds": [ "RESOURCE-FINANCE-COVERAGE", "RESOURCE-AUTHORIZED-DEVICE", "RESOURCE-CURRENT-RECORDS", "RESOURCE-ALTERNATE-WORKSPACE" ], "supplierDependencyIds": ["SUPPLIER-SETTLEMENT-CAPABILITY"], "recordsSafeguardIds": ["SAFEGUARD-RECONCILIATION-RECORDS"], "communicationIds": ["COMMUNICATION-TEAM-STATUS", "COMMUNICATION-LEADERSHIP-STATUS"], "statusCadenceId": "CADENCE-FINANCE-120", "restorationHandoffCriteria": "The IT recovery owner provides authorized record-access evidence and the supplier capability gap is resolved or accepted outside this plan.", "returnToNormalSequence": 3 } ], "continuityMethods": [ { "id": "METHOD-REMOTE-INTAKE", "name": "Pre-authorized distributed intake arrangement", "type": "alternate-work-method", "functionIds": ["EF-CLIENT-INTAKE"], "locationIds": ["LOCATION-DISTRIBUTED-A"], "arrangement": "Use the pre-authorized distributed work arrangement for minimum aggregate intake after human activation.", "decisionOwnerId": "ROLE-SERVICE-OPERATIONS", "startsOnlyAfterHumanActivation": true, "limitations": "The arrangement does not define access commands, restore systems, or confirm staff availability.", "sourceIds": ["SOURCE-WORK-METHOD-REVIEW", "SOURCE-RESOURCE-REVIEW"], "classification": "observed", "confidence": "medium", "reviewBy": "2026-09-30" }, { "id": "METHOD-ALTERNATE-SCHEDULING", "name": "Alternate scheduling arrangement", "type": "alternate-work-method", "functionIds": ["EF-SERVICE-SCHEDULING"], "locationIds": ["LOCATION-DISTRIBUTED-A", "LOCATION-AUTHORIZED-B"], "arrangement": "Use one approved aggregate scheduling view from a pre-authorized work environment after human activation.", "decisionOwnerId": "ROLE-SERVICE-OPERATIONS", "startsOnlyAfterHumanActivation": true, "limitations": "The arrangement depends on separately restored access and contains no technical procedure.", "sourceIds": ["SOURCE-WORK-METHOD-REVIEW", "SOURCE-RESOURCE-REVIEW"], "classification": "inferred", "confidence": "medium", "reviewBy": "2026-09-30" }, { "id": "METHOD-DEFERRED-RECONCILIATION", "name": "Minimum deferred reconciliation arrangement", "type": "alternate-work-method", "functionIds": ["EF-PAYMENT-RECONCILIATION"], "locationIds": ["LOCATION-AUTHORIZED-B"], "arrangement": "Preserve aggregate exceptions for authorized review and perform the minimum comparison available after human activation.", "decisionOwnerId": "ROLE-FINANCE-OPERATIONS", "startsOnlyAfterHumanActivation": true, "limitations": "The arrangement does not approve settlement, supplier terms, data recovery, or financial outcomes.", "sourceIds": ["SOURCE-WORK-METHOD-REVIEW", "SOURCE-SUPPLIER-ASSUMPTION"], "classification": "assumed", "confidence": "low", "reviewBy": "2026-08-31" } ], "locations": [ { "id": "LOCATION-DISTRIBUTED-A", "label": "Pre-authorized distributed work environment A", "kind": "distributed", "locationRef": "location://example/distributed-work-environment-a", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING"], "minimumCapability": "Authorized power, connectivity, privacy, and records-access controls for minimum operations.", "containsExactAddress": false, "reviewBy": "2026-09-30" }, { "id": "LOCATION-AUTHORIZED-B", "label": "Pre-authorized alternate work environment B", "kind": "alternate-workspace", "locationRef": "location://example/alternate-work-environment-b", "functionIds": ["EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "minimumCapability": "Authorized workspace, connectivity, privacy, and controlled access to aggregate records.", "containsExactAddress": false, "reviewBy": "2026-09-30" } ], "resources": [ { "id": "RESOURCE-SERVICE-COVERAGE", "kind": "people-role", "minimumRequirement": "One authorized service operations role for each active service window.", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING"], "ownerRoleId": "ROLE-SERVICE-OPERATIONS", "sourceIds": ["SOURCE-RESOURCE-REVIEW"], "classification": "inferred", "confidence": "medium", "reviewBy": "2026-09-30" }, { "id": "RESOURCE-FINANCE-COVERAGE", "kind": "people-role", "minimumRequirement": "One authorized finance operations role for aggregate reconciliation review.", "functionIds": ["EF-PAYMENT-RECONCILIATION"], "ownerRoleId": "ROLE-FINANCE-OPERATIONS", "sourceIds": ["SOURCE-RESOURCE-REVIEW"], "classification": "inferred", "confidence": "medium", "reviewBy": "2026-09-30" }, { "id": "RESOURCE-AUTHORIZED-DEVICE", "kind": "technology", "minimumRequirement": "One pre-authorized managed access device per active role, without credentials in this plan.", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "ownerRoleId": "ROLE-CONTINUITY-OWNER", "sourceIds": ["SOURCE-RESOURCE-REVIEW"], "classification": "inferred", "confidence": "medium", "reviewBy": "2026-09-30" }, { "id": "RESOURCE-CURRENT-RECORDS", "kind": "information", "minimumRequirement": "Authorized aggregate records sufficient to identify open minimum-service work.", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "ownerRoleId": "ROLE-CONTINUITY-OWNER", "sourceIds": ["SOURCE-APPROVED-BIA", "SOURCE-RESOURCE-REVIEW"], "classification": "observed", "confidence": "high", "reviewBy": "2026-10-15" }, { "id": "RESOURCE-ALTERNATE-WORKSPACE", "kind": "facility", "minimumRequirement": "One pre-authorized aggregate workspace capability without exact location details in this plan.", "functionIds": ["EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "ownerRoleId": "ROLE-CONTINUITY-OWNER", "sourceIds": ["SOURCE-WORK-METHOD-REVIEW"], "classification": "observed", "confidence": "medium", "reviewBy": "2026-09-30" } ], "supplierDependencies": [ { "id": "SUPPLIER-SETTLEMENT-CAPABILITY", "label": "Fictional aggregate settlement capability", "supplierRef": "supplier://example/aggregate-settlement-capability", "capability": "One aggregate submission and result window per business day.", "functionIds": ["EF-PAYMENT-RECONCILIATION"], "ownerRoleId": "ROLE-FINANCE-OPERATIONS", "alternateDecision": "Hold unresolved aggregate exceptions and escalate the capability gap outside this plan.", "sourceIds": ["SOURCE-SUPPLIER-ASSUMPTION"], "classification": "assumed", "confidence": "low", "reviewBy": "2026-08-31", "containsPrivateVendorDetails": false } ], "recordsSafeguards": [ { "id": "SAFEGUARD-SERVICE-RECORDS", "informationClass": "Aggregate open intake and scheduling work", "minimumAccess": "Authorized minimum view of open work and service-window status.", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING"], "accessOwnerRoleId": "ROLE-SERVICE-OPERATIONS", "primaryPolicyRef": "policy://example/aggregate-service-record-access", "alternateAccessRef": "access://example/pre-authorized-service-record-view", "safeguards": [ "Role-based access", "Minimum-purpose fields", "Aggregate status only", "Access review after return" ], "sourceIds": ["SOURCE-WORK-METHOD-REVIEW", "SOURCE-RESOURCE-REVIEW"], "reviewBy": "2026-09-30", "containsCredentials": false, "containsPersonalData": false }, { "id": "SAFEGUARD-RECONCILIATION-RECORDS", "informationClass": "Aggregate settlement totals and exception status", "minimumAccess": "Authorized aggregate totals and unresolved exception identifiers without personal details.", "functionIds": ["EF-PAYMENT-RECONCILIATION"], "accessOwnerRoleId": "ROLE-FINANCE-OPERATIONS", "primaryPolicyRef": "policy://example/aggregate-reconciliation-access", "alternateAccessRef": "access://example/pre-authorized-reconciliation-view", "safeguards": [ "Role-based access", "Aggregate values only", "No payment credentials", "Exception review after return" ], "sourceIds": ["SOURCE-WORK-METHOD-REVIEW", "SOURCE-SUPPLIER-ASSUMPTION"], "reviewBy": "2026-08-31", "containsCredentials": false, "containsPersonalData": false } ], "communications": [ { "id": "COMMUNICATION-TEAM-STATUS", "audienceRoleGroup": "Included function owner roles", "purpose": "Share aggregate activation state, function availability, minimum-service status, and unresolved gaps.", "primaryChannelRef": "channel://example/continuity-team-status", "alternateChannelRef": "channel://example/continuity-team-status-alternate", "senderRoleId": "ROLE-COMMUNICATIONS-COORDINATOR", "cadenceMinutes": 60, "acknowledgementRequired": true, "accessibilityAndLanguageReviewRequired": true, "sourceIds": ["SOURCE-COMMUNICATIONS-REVIEW"], "reviewBy": "2026-09-30", "containsContacts": false }, { "id": "COMMUNICATION-LEADERSHIP-STATUS", "audienceRoleGroup": "Continuity decision roles", "purpose": "Share aggregate function status, decisions required, evidence gaps, and restoration handoff state.", "primaryChannelRef": "channel://example/continuity-leadership-status", "alternateChannelRef": "channel://example/continuity-leadership-status-alternate", "senderRoleId": "ROLE-COMMUNICATIONS-COORDINATOR", "cadenceMinutes": 120, "acknowledgementRequired": true, "accessibilityAndLanguageReviewRequired": true, "sourceIds": ["SOURCE-COMMUNICATIONS-REVIEW"], "reviewBy": "2026-09-30", "containsContacts": false } ], "statusCadences": [ { "id": "CADENCE-SERVICE-60", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING"], "updateEveryMinutes": 60, "reportingRoleId": "ROLE-SERVICE-OPERATIONS", "audienceRoleGroup": "Continuity decision roles", "minimumFields": [ "Function ID", "Minimum-service state", "Aggregate queue band", "Dependency gaps", "Decision needed" ], "communicationId": "COMMUNICATION-TEAM-STATUS", "startsAfterHumanActivation": true }, { "id": "CADENCE-FINANCE-120", "functionIds": ["EF-PAYMENT-RECONCILIATION"], "updateEveryMinutes": 120, "reportingRoleId": "ROLE-FINANCE-OPERATIONS", "audienceRoleGroup": "Continuity decision roles", "minimumFields": [ "Function ID", "Minimum-service state", "Aggregate exception band", "Supplier capability state", "Decision needed" ], "communicationId": "COMMUNICATION-LEADERSHIP-STATUS", "startsAfterHumanActivation": true } ], "restorationAndReturn": { "decisionState": "requires-human-return-decision", "authorityRoleId": "ROLE-CONTINUITY-AUTHORITY", "itRestorationHandoffRef": "handoff://example/disaster-recovery/authorized-restoration-evidence", "requiredConditions": [ "The IT recovery owner provides authorized evidence that the applicable minimum service is available.", "Each function owner reviews minimum access, aggregate records, unresolved gaps, and changed-work reconciliation needs.", "The communications coordinator prepares an aggregate return-state message through the approved channel reference.", "The continuity authority records a human return, hold, or partial-return decision outside this static template." ], "functionReturnOrder": [ "EF-SERVICE-SCHEDULING", "EF-CLIENT-INTAKE", "EF-PAYMENT-RECONCILIATION" ], "communicationOwnerId": "ROLE-COMMUNICATIONS-COORDINATOR", "reconciliationOwnerId": "ROLE-CONTINUITY-OWNER", "returnAuthorizedAt": null, "authorizedByRoleId": null }, "exercises": [ { "id": "EXERCISE-ACTIVATION-TABLETOP", "type": "tabletop", "scheduledFor": "2026-08-20", "ownerRoleId": "ROLE-CONTINUITY-OWNER", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "objective": "Review activation evidence, succession, minimum-function decisions, status cadence, and owner handoffs using fictional aggregate inputs.", "status": "scheduled-not-run", "evidenceRef": null, "findings": [], "revisionDueAt": "2026-09-05" }, { "id": "EXERCISE-COMMUNICATIONS-CHECK", "type": "communications-check", "scheduledFor": "2026-09-10", "ownerRoleId": "ROLE-COMMUNICATIONS-COORDINATOR", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "objective": "Review reserved primary and alternate channel references, acknowledgement rules, accessibility review, and status fields without real contacts.", "status": "scheduled-not-run", "evidenceRef": null, "findings": [], "revisionDueAt": "2026-09-25" }, { "id": "EXERCISE-RETURN-HANDOFF", "type": "handoff-review", "scheduledFor": "2026-10-01", "ownerRoleId": "ROLE-CONTINUITY-AUTHORITY", "functionIds": ["EF-CLIENT-INTAKE", "EF-SERVICE-SCHEDULING", "EF-PAYMENT-RECONCILIATION"], "objective": "Review evidence expectations, function return order, reconciliation ownership, and the human return decision without restoring a real service.", "status": "scheduled-not-run", "evidenceRef": null, "findings": [], "revisionDueAt": "2026-10-10" } ], "assumptions": [ { "id": "ASSUMPTION-DISTRIBUTED-CAPACITY", "statement": "The authorized distributed work arrangement can support the minimum aggregate intake and scheduling roles.", "ownerRoleId": "ROLE-CONTINUITY-OWNER", "classification": "assumed", "confidence": "medium", "sourceIds": ["SOURCE-WORK-METHOD-REVIEW"], "expiresAt": "2026-09-30", "validationPlan": "Review the scheduled activation tabletop and current aggregate work-method evidence before expiry." }, { "id": "ASSUMPTION-SUPPLIER-WINDOW", "statement": "The fictional settlement capability remains available for one aggregate window per business day.", "ownerRoleId": "ROLE-FINANCE-OPERATIONS", "classification": "assumed", "confidence": "low", "sourceIds": ["SOURCE-SUPPLIER-ASSUMPTION"], "expiresAt": "2026-08-31", "validationPlan": "Obtain an authorized aggregate supplier capability statement or preserve the gap before expiry." } ], "gaps": [ { "id": "GAP-SUPPLIER-CAPABILITY", "statement": "The fictional supplier capability is represented by an expiring aggregate assumption.", "ownerRoleId": "ROLE-FINANCE-OPERATIONS", "dueAt": "2026-08-31", "classification": "assumed", "confidence": "low", "sourceIds": ["SOURCE-SUPPLIER-ASSUMPTION"], "validationPlan": "Replace the assumption with a current authorized aggregate capability reference or keep the continuity arrangement on hold.", "status": "open" }, { "id": "GAP-COMMUNICATIONS-CHECK", "statement": "The reserved continuity channel references have not been exercised in this fictional example.", "ownerRoleId": "ROLE-COMMUNICATIONS-COORDINATOR", "dueAt": "2026-09-25", "classification": "inferred", "confidence": "medium", "sourceIds": ["SOURCE-COMMUNICATIONS-REVIEW"], "validationPlan": "Complete the scheduled aggregate communications check and retain an authorized result reference outside this public pack.", "status": "open" } ], "reviewSchedule": { "cadenceDays": 75, "nextReviewAt": "2026-10-15", "reviewTriggers": [ "Approved BIA input changes", "Essential-function or owner-role changes", "Alternate-method, location, resource, supplier, records, or communications changes", "Activation, exercise, restoration handoff, or return-to-normal observations", "Expired assumption, evidence source, delegation, approval, or plan version" ], "revisionOwnerId": "ROLE-CONTINUITY-OWNER" }, "revisionHistory": [ { "version": "1.0.0", "date": "2026-08-01", "editorRoleId": "ROLE-CONTINUITY-OWNER", "summary": "Approved the fictional aggregate continuity operating plan, human decisions, arrangements, handoffs, schedule, evidence gaps, and owner boundaries.", "planApproved": true, "recoveryTargetsApproved": false } ], "boundaries": { "ownsImpactAnalysis": false, "approvesRecoveryTargets": false, "ownsItRestorationProcedures": false, "ownsIncidentResponse": false, "ownsExactRunbooks": false, "ownsRiskAcceptanceOrTreatment": false, "ownsProjectDelivery": false, "canSelfActivate": false, "certifiesReadinessOrCompliance": false, "provesBusinessOutcome": false, "containsPersonalContactsCredentialsSensitiveLocationsOrPrivateVendorDetails": false }, "disclaimer": "Fictional aggregate example for structure testing only. Approval applies to this plan version, not to recovery targets. The record cannot activate itself, direct IT restoration or incident response, certify readiness or compliance, or promise continuity, recovery, financial, legal, safety, or business outcomes." }