Business Continuity & Disaster Recovery Plan
Cyber Rebels Ltd
Version 1.0 – November 2025
Cyber Rebels Ltd is committed to ensuring the continuity of our services and the safety of our clients’ data in the event of disruption. This Business Continuity & Disaster Recovery Plan outlines the steps we take to maintain essential operations, minimise downtime, and recover quickly from unexpected incidents. It applies to all Cyber Rebels staff, trainers, contractors, and partners.
1. Scope and Purpose
This plan covers:
- Service continuity for live training (online and on-site)
- Data protection and information recovery
- Communication with clients during disruptions
- Technical and operational resilience
- Protection of business-critical functions
Its purpose is to ensure Cyber Rebels remains operational and able to deliver services safely, securely, and with minimal disruption.
2. Critical Activities
Our critical business functions include:
- Delivery of live cybersecurity training (virtual or on-site)
- Communication with clients and learners
- Secure access to training materials and resources
- Data handling, storage, and protection
- Website and booking system availability
These activities are prioritised during any disruption.
3. Risk Scenarios Covered
This plan considers disruptions such as:
- Loss of internet connectivity
- Trainer illness or unavailability
- Power outages
- Hardware or device failure
- Cybersecurity incidents
- Website or platform outages
- Transport disruptions affecting on-site delivery
- Local or national emergencies
4. Continuity Measures (Online Delivery)
For live virtual training, Cyber Rebels maintains:
- Backup devices for trainers (laptop/secondary device)
- Mobile hotspot or alternative internet connection
- Secure cloud-based storage for all training materials
- The ability to switch to an alternative online platform (Zoom, Teams, Google Meet)
- The option to reassign delivery to an alternative trainer where available
- Immediate communication with clients if rescheduling is required
This ensures online delivery can continue even during technical disruptions.
5. Continuity Measures (On-Site Delivery)
When delivering training on-site, Cyber Rebels ensures:
- Trainers travel with sufficient time buffer to account for delays
- Backup presentation materials are stored offline
- The ability to deliver without internet if required (offline slides)
- Pre-agreed points of contact at the venue
- Use of power-efficient equipment and backup power options where available
- Immediate communication with the client if travel is disrupted
If on-site delivery cannot continue safely (e.g., severe weather or emergencies), sessions may be moved online or rescheduled.
6. Data Protection & Disaster Recovery
Cyber Rebels maintains strong data protection controls to ensure quick and safe recovery:
- All critical data is stored securely in the cloud
- Encrypted local backups for essential files
- Regular system updates and security patching
- Multi-factor authentication for access to systems
- Digitally certified email communication
- No long-term storage of sensitive or unnecessary data
- Rapid isolation and response procedures for suspected cyber incidents
In the event of a data breach or cybersecurity incident, we follow our internal incident response process and notify affected clients as required by UK GDPR.
7. Communication Plan
In the event of disruption, Cyber Rebels will:
- Notify affected clients as soon as possible
- Provide a clear explanation of the issue
- Offer alternative delivery formats (online, rescheduling, alternative trainer)
- Keep clients informed until the issue is resolved
- Document the incident internally for review
Communication will take place via email, phone, or other pre-agreed methods.
8. Recovery Time Objectives (RTO)
Cyber Rebels aims to:
- Restore access to essential systems within 4 hours
- Resume live online training within the same working day where possible, or reschedule with priority
- Respond to incidents and client communication within 2 hours
Website recovery time is dependent on hosting provider service levels but is monitored continuously.
9. Review & Improvement
This plan will be reviewed:
- Annually
- After any major disruption
- When new services, technologies, or operational changes occur
Cyber Rebels is committed to continuously improving resilience and minimising operational risk.
10. Responsibilities
The Director of Training & Development holds responsibility for:
- Activation of this plan
- Communication with clients
- Recovery coordination
- Post-incident review
- Ensuring staff and contractors understand continuity expectations