Business Continuity Management System Policy Statement

Breeze is committed to maintaining and improving the business continuity process by adopting a business continuity management system. This system provides a framework for integrating the ISO 22301:2019.

The company defines our core values for the Business Continuity Management System as follows:

• Breeze is committed to ensuring the uninterrupted availability of critical business resources required to support essential business operations.
• We aim to proactively identify, assess, and reduce high-priority business continuity risks within our risk register, thereby strengthening our resilience against disruptions.
• In the event of a disruptive incident, we are dedicated to ensuring an orderly, timely, and effective recovery and continuity of critical business processes, minimizing operational downtime and impact.
• We strive to prevent business continuity breaches and mitigate associated losses through robust planning, monitoring, and response mechanisms.
• Breeze is committed to complying with all applicable contractual, regulatory, and legal requirements related to business continuity management.
• We promote a strong business continuity culture across the organization by fostering awareness, accountability, and preparedness at all levels.
• We ensure that key personnel are adequately trained in business continuity principles and practices, while also creating organization-wide awareness of roles and responsibilities within the Business Continuity Management System (BCMS).

The BCMS covers the business processes, people, facilities, systems, and suppliers that support the delivery of our products and services, across our operating entities and locations.

It applies to every employee and contractor, and to third parties acting on our behalf where their activities support a critical business process.

Executive management owns the BCMS. It approves this policy statement, allocates the resources needed to meet the commitments in it, and reviews the performance of the system.

Responsibility for maintaining continuity plans, and for acting on them during a disruptive incident, is assigned to named roles within the business. All personnel are responsible for understanding their own role within the BCMS and for reporting events that could escalate into a disruption.

We maintain a risk register in which business continuity risks are identified, assessed, and prioritised. High-priority risks are treated to reduce our exposure and strengthen resilience against disruption.

Business impact analysis establishes which activities are critical to essential business operations, the resources those activities depend on, and the point at which their loss becomes unacceptable. This analysis is what informs our continuity and recovery planning.

Our objective is the uninterrupted availability of the critical business resources that support essential operations. Where a disruptive incident occurs, our plans are designed to deliver an orderly, timely, and effective recovery of critical business processes, minimising operational downtime and the impact on our customers.

Planning, monitoring, and response mechanisms are maintained to prevent business continuity breaches and to mitigate associated losses where one occurs.

We comply with all applicable contractual, regulatory, and legal requirements relating to business continuity management, including obligations passed through to us by regulated customers.

We promote a strong business continuity culture by fostering awareness, accountability, and preparedness at all levels of the organisation.

Key personnel are trained in business continuity principles and practices, and organisation-wide awareness activity ensures that roles and responsibilities within the BCMS are understood by everyone, not only by those who hold them.

The BCMS is maintained and improved on an ongoing basis. This policy statement, and the arrangements supporting it, are reviewed periodically and after any significant incident, material change to our operations, or change in regulatory expectations.