Business Continuity Plan

1. Endpoint Detection and Response – SonicWALL Capture Client (EDR)

• Continuous Behavioral Monitoring 24/7.
• Comprehensive profiles of file, application, process, and network activity.
• Protection against file-based and fileless malware.
• 360-degree attack view with actionable intelligence.
• 24/7 Attack Remediation.
• Application Vulnerability Intelligence for prioritized patching.
• Endpoint Network Control with firewall-like controls.
• Content Filtering to block malicious sites, IP addresses, and domains.
• Device Control to block potentially infected devices.

2. Managed Intrusion Protection – Huntress (MDR)

• Intrusion Detection Services.
• Monitored threat detection services with advanced and persistent threat hunting.
• Ransomware Canaries for monitoring.
• 24/7 AI Security Operations Center oversight.

3. Microsoft 365 Backup – Datto SaaS

• Cloud-based protection for Microsoft 365.
• Data protection and encryption.
• Easy recovery of files, folders, or account data in the original format.
• Protection for Exchange, OneDrive for Business, SharePoint, and Teams Information.

4. Security Awareness Training Subscription

• Third-party security awareness training provided by Clip-Training.

5. Microsoft Defender for Business

• Enterprise-grade protection across laptops, desktops, and mobile devices.
• Threat and vulnerability management.
• Next-generation antivirus protection.
• Endpoint detection and response.
• Automated investigation and response.
• Defender for Office 365 for email protection.
• Enhanced security for work data on personal devices with Microsoft Intune.
• Secure access to work apps with Azure AD Premium Plan 1.
• Enhanced protection against lost or stolen passwords with advanced multifactor authentication.
• Data protection with Azure Information Protection and data loss prevention.

6. Business Continuity Measures

In the event of a pandemic or other challenges:

• Generators in place in case of power loss.
• Calibrated Insurance Services data/storage handled on multiple Microsoft and Amazon servers for secure infrastructure.

7. AMS Security and Operation

Amazon AWS Cloud Infrastructure:

• Designed to satisfy the requirements of security-sensitive customers.
• Extensive network and security monitoring systems.
• Purpose-built security tools tailored for AWS’s unique environment.
• Data centers in multiple geographic regions and Availability Zones for maximum resiliency.
• Continuous scanning and testing of infrastructure components.

Cloud Architecture:

• AWS (Amazon Web Services) provides Infrastructure-as-a-Service and Platform-as-a-Service Environments.
• Availability Zones (AZ) for highly reliable infrastructure.
• Virtual Private Cloud/Network (VPC) for logically isolated sections.
• Simple Storage Service (S3) for secure, durable, highly-scalable object storage.

8. Data Storage and Retention

• All data stored within the main application database for 10 years.
• Data beyond the 10-year mark purged from the system, retrievable via encrypted SQL server backup files when necessary.

9. AWS Compliance

• Compliant with international standards, including FedRAMP, HIPAA, FERPA, and Department of Defense.
• FIPS 140-2 encryption standards.
• Certification reports for ISO 27001, SOC, PCI Data Security Standard, and FedRAMP compliance.

Peer Review

A trained expert from our team will perform an unbiased review of the claim history. A Calibrated professional will complete a pre‐litigation, videotaped inspection of the loss location and all damages to document the property in its current condition. We will then compare it with the evidence gathered by the insurance adjuster(s), engineer(s), vendor(s), etc. following the loss.

This is very important as we can document and testify regarding repairs that have or have not been completed. Additionally, we will determine if the current demand for indemnity is consistent with the date of loss, cause of loss, and industry standards for what is reasonable, fair, and customary.