Policy
Business Continuity Policy
"We are committed to protecting our employees, clients, data, and reputation by having robust continuity measures in place."
The policy's purpose is to ensure RGA maintains essential operations during disruptions including system failures, cyber incidents, natural disasters, or emergencies.
Scope
Applies to all RGA employees, contractors, and consultants across all business units, systems, and operations including data platforms, analytics services, and project delivery. Coverage extends to events disrupting normal operations that impact client service, employee safety, or business viability.
Policy Statement
RGA commits to:
- Maintaining ability to deliver critical services during disruption
- Minimising incident impact on clients, employees, and partners
- Complying with regulatory and contractual business continuity requirements
Responsibilities
Board/Senior Management approve frameworks, allocate resources, and review plans annually. The Business Continuity Lead/Manager develops, maintains, and tests plans while coordinating incident response. Employees and contractors understand relevant plans, participate in testing, and follow procedures during disruptions.
Business Continuity Planning
"RGA maintains documented plans covering" identification of critical functions, roles during disruption, communication protocols, IT systems recovery, and supplier dependencies. Plans receive annual review and updates following tests or incidents.
Testing and Review
Regular tests ensure plans are effective, employees understand responsibilities, and lessons from tests or incidents are incorporated.
Reporting and Improvement
Incidents are logged, investigated, and reviewed with continuous improvement actions taken.
Compliance
"Compliance with this policy is mandatory. Non-compliance may result in disciplinary action."