Disaster Recovery Policy

Purpose

This policy sets out how Towerblock Radio CIC recovers its IT systems, data and broadcast infrastructure after a major incident or system failure.

Scope

This policy applies to all IT systems, data storage, broadcast infrastructure and digital services operated by Towerblock Radio CIC.

Definitions

• Disaster recovery means the process of restoring IT systems and data after a major incident.
• Recovery point objective (RPO) means the maximum acceptable data loss, measured in time.
• Recovery time objective (RTO) means the maximum acceptable downtime.

Responsibilities

The board approves the disaster recovery policy. The Operations Lead maintains backups and executes recovery. All staff follow recovery procedures.

Policy Statement

Towerblock Radio CIC maintains a disaster recovery capability to ensure that IT systems, data and broadcast infrastructure can be restored quickly after a major incident, minimising disruption to services and data loss.

Detailed Procedures

Backup strategy

All critical data is backed up daily. Backups are stored in at least two locations, including one off-site or cloud location. Backup integrity is tested monthly. Backup retention is minimum 30 days for daily backups and 12 months for monthly backups.

Recovery objectives

• RTO for broadcast: 4 hours (switch to backup or pre-recorded content).
• RTO for website: 24 hours.
• RTO for financial systems: 48 hours.
• RPO for all systems: 24 hours (maximum acceptable data loss).

Recovery procedures

1. Assess the scope of the incident.
2. Notify the board chair and Operations Lead.
3. Isolate affected systems to prevent further damage.
4. Restore from the most recent clean backup.
5. Verify data integrity.
6. Restore services incrementally, prioritising broadcast and website.
7. Communicate with stakeholders.
8. Conduct a post-incident review.

Incident classification

• Minor: single system failure, resolved within 4 hours.
• Moderate: multiple systems affected, resolved within 24 hours.
• Major: significant data loss or extended downtime, requires board notification.
• Critical: total system failure, requires full disaster recovery activation.

Reporting Process

All major and critical incidents must be reported to the board within 24 hours. Data breaches must be reported to the ICO within 72 hours.

Compliance Requirements

• UK GDPR and Data Protection Act 2018.
• Companies Act 2006.

Monitoring

Backup integrity is tested monthly. A full disaster recovery test is conducted annually.

Review Cycle

This policy shall be reviewed annually and after any major incident.

Version Number

Version 1.0

Approval Section

Approved by: Towerblock Radio CIC Board Date: July 2026 Next review: July 2027

Related Policies

• Business Continuity Plan
• Information Security Policy
• Cyber Security Policy
• Document Retention Policy

Website URL slug

/policies/disaster-recovery-policy

Meta Title

Disaster Recovery Policy | Towerblock Radio

Meta Description

Towerblock Radio CIC's disaster recovery policy covering backup strategy, recovery objectives, incident classification and procedures for restoring IT systems and broadcast infrastructure.

Suggested menu category

Governance

Suggested search keywords

disaster recovery, backup, RTO, RPO, IT systems, data recovery, cyber resilience