CPQ™ Business Continuity & Records Preservation Plan
Ensures continuity of credentialing, verification and record preservation during emergencies or cessation of activity.
1. Purpose & Basis
This document is presented as proposed CPQ™ policy for external review, extending the founding standards pack and drafted to align the CPQ™ ecosystem with ISO/IEC 17024 principles for bodies certifying persons. Any new procedural or numeric requirement remains Draft and does not become binding within CPQ until changed to Active through a documented governance decision; it is not a claim of accreditation or recognition by another body.
This plan defines how CPQ protects continuity of credentialing, verification and records, including custody arrangements if operations cease.
2. Continuity Scope
- Continuity of the credential register and public verification under CPQ-REG.
- Secure access to and protection of records under CPQ-DATA.
- Reasonable continuity of complaint intake and handling under CPQ-ECR.
- Protection of the integrity of decisions made before a disruption.
3. Continuity Risk Analysis
| Threat | Potential impact | Control |
|---|---|---|
| Data or system loss | Verification unavailable | Regular backups and tested recovery |
| Key-person dependency | Critical decisions stop | Documented procedures and delegated backup |
| Financial disruption | Register/service cannot operate | Contingency arrangements |
| Technology-provider failure | Digital outage | Contractual alternative and transition plan |
4. Data & Systems Continuity
CPQ maintains regular secure backups of critical data, reasonable recovery-time and data-loss objectives, and periodic restore testing to verify recoverability.
5. Records Preservation & Protection
Records are preserved under CPQ-DATA, with identity data separated from aggregated data, role-based access restrictions and access logs for complaint and assessment files.
6. Orderly Cessation & Custody Transfer
On partial or full cessation, credential and verification records remain available for a transition period or custody is transferred under documented arrangements. Holders are informed of status and options without silent loss of records or accrued rights.
7. Governance, Testing & Review
Senior management and relevant committees own the plan; critical elements are tested at least annually, reviewed through CPQ-QMS and changes recorded in CPQ-POLREG.