Content

Disaster Recovery Plan

Purpose

The purpose of the Disaster Recovery Plan is to establish processes and tolerances for recovering normal operations in case of a Disaster

Recovery Time Objective (RTO)

The RTO defines the maximum amount of time the organization can tolerate for recovering normal operations in case of a disaster. LightForce Orthodontics has an RTO of 24 hours. Once a Disaster state is identified, the Disaster Recovery Team targets a 24 hour window to recover lost data and systems from backup.

Recovery Point Objective (RPO)

The RPO defines the maximum amount of data the organization can afford to lose as a result of an outage. This is reflected in the frequency of Data Backup and Replication services. LightForce Orthodontics performs daily backups of all critical data, and performs regular replication of data in the manufacturing pipeline as often as every 30 minutes.

Impacted Client Plan

Escalation & Coomunication Plan

Impacted clients can monitor the LightForce Status page where an updated status is provided.

As part of ISO 13485 and our Quality Manual - we have documented procedures for notifying customers of issues

Hardware and Software Inventory

LightForce Orthodontics maintains an accurate and updated Critical asset inventory of assets required to maintain operations. This includes physical and virtual hardware, data repositories, software and manufacturing locations. This includes Manufacturing equipment, Networking equipment, software, licensing etc.

DRP Team Responsibilities:

  • Maintaining Critical Asset Inventory (Hardware, Data, Software, Mfg Locations)
  • Backups and maintenance of Business Continuity Systems
  • Declaring a Disaster
  • Vendor Engagement
  • Communications
  • Crisis Management

Disaster Recovery Sites/Locations

Data:

All software, client data and production data is stored securely in a multi-site US Based cloud infrastructure

Manufacturing:

Lightforce Orthodontics is planning the expansion to a second Manufacturing Location for diversity, production and as a functional hot site.

Remote Storage

All of the Backup Data for LightForce Orthodontics platform is stored within a diverse, multi-site US based cloud infrastructure.

Disaster Response Procedures

  • A Disaster event is Identified
  • Disaster Recovery Team is engaged
  • Critical Systems affected by the Disaster are assessed for optimal recovery process
  • Business Continuity and Recovery Procedures begin simultaneously. I.E. Failover process begins while production systems are recovered, hardware is acquired etc.
  • Disaster Recovery Team verifies operations
  • Systems in Failover State are reverted to normal production operations
  • Disaster Recovery Team verifies operations
  • Communications are made at all necessary junctures to impacted personnel, vendors and clients

Sensitive Data

In compliance with HIPAA regulations, all sensitive data is identified, monitored, backed up and stored securely.

Disaster Recovery Drills

As part of normal IT procedure. Backup and Recovery solutions are reviewed regularly and drilled in both test, and production environments to ensure data and Disaster Recovery Plan integrity.