← All draft policies
Proposed policy · Not adopted
Incident Response and Continuity
This is a draft for foundation leadership and professional review. Unresolved legal, operational, privacy and tax matters must be reviewed before adoption.
Preparation and response
Document infrastructure ownership, administrator notifications, incident escalation, access controls and recovery procedures. Verify backups by restoration testing rather than relying only on successful backup jobs.
Recovery and succession
For infrastructure failures or security incidents, record containment, recovery decisions and appropriate community notices. Maintain authorized successors, shared documentation and realistic resource plans. Legal, security and technical limitations can affect recovery and transitions.