Business Continuity Management Policy

Sustainability Policies » Corporate Governance Policy

Business Continuity Management Policy

1. Policy Statement

  • Quanta Computer is committed to establishing, implementing, maintaining, and continually improving its Business Continuity Management System to ensure the continuity of critical business processes, contracted products and services, and customer commitments during disruptive incidents.
  • Quanta shall identify business continuity risks, assess potential impacts, define recovery requirements, and establish appropriate risk mitigation and business recovery strategies to strengthen organizational resilience and reduce operational disruption.

2. Leadership Commitment

  • Quanta’s top management shall provide leadership and oversight for the Business Continuity Management Program by setting strategic business continuity directions, approving management objectives, and supporting the resources required for implementation and continual improvement.
  • Quanta’s management shall ensure that business continuity requirements are considered in relevant business processes, operational planning, risk management activities, and decision-making.

3. Objectives

  • Quanta’s Business Continuity Management System aims to maintain or restore critical operations within defined recovery requirements, minimize disruption to contracted products and services, and strengthen Quanta’s preparedness for major disruption scenarios.
  • Quanta’s Business Continuity Management System also supports compliance with applicable legal, regulatory, customer, and contractual requirements, and drives continual improvement of business continuity capability through review, testing, exercises, and corrective actions.

4. Scope of Coverage

  • This Business Continuity Management Policy applies to all persons, critical business processes, supporting functions, and operating sites involved in Quanta’s provision of contracted products and services to customers.
  • The scope includes relevant activities and resources required to support business continuity, such as manufacturing operations, logistics and receiving operations, IT systems, facility management, equipment maintenance, supply chain management, quality management, and customer coordination.

5. Ownership and Responsibilities

  • Quanta define accountability, roles, and responsibilities for key persons involved in planning, implementing, monitoring, reviewing, and maintaining the Business Continuity Management Program.
  • Business process owners and designated directly responsible individuals are responsible for identifying critical activities, conducting Business Impact Analysis, assessing risks, defining recovery requirements, maintaining business continuity plans, and participating in tests and exercises.
  • Supporting functions shall provide necessary expertise and resources, including IT recovery, facility restoration, equipment repair, supply continuity, manpower arrangement, internal communication, and customer coordination.

6. Business Continuity Management Framework

  • Quanta shall establish a Business Continuity Management framework aligned with ISO 22301 principles and the business continuity lifecycle. The framework shall define key activities, responsible persons, objectives, and the cadence for performing and reviewing these activities.
  • The Business Continuity Management framework shall include scope definition, Business Impact Analysis, risk assessment, risk mitigation planning, business recovery strategy development, documentation review, training, testing, exercises, and continual improvement.
  • Through Business Impact Analysis, Quanta shall identify critical processes, assess potential impacts, and define recovery requirements such as Maximum Tolerable Period of Disruption, Recovery Time Objective, and minimum acceptable operating level.
  • Through risk assessment, Quanta shall identify disruption scenarios, evaluate inherent and residual risks, and determine appropriate risk mitigation actions and business recovery strategies.

7. Documentation Review and Exercises

  • Quanta shall review business continuity documentation periodically and update it when significant changes occur, including changes to business processes, facilities, equipment, IT systems, suppliers, customer requirements, or regulatory requirements.
  • Quanta shall test or exercise business continuity plans periodically to validate their effectiveness, identify gaps, and ensure responsible personnel understand their roles, responsibilities, and recovery actions.

8. Continual Improvement

  • Quanta shall continually improve the suitability, adequacy, and effectiveness of its Business Continuity Management System through monitoring, review, lessons learned, corrective actions, exercise results, and changes in business or external conditions.