DAFRIC Business Continuity Planning Policy Statement

To ensure the effective availability of essential products and services, DAFRIC provides this
Business Continuity Planning (BCP) policy in support of a comprehensive program for business
continuity, disaster prevention and total business recovery.
Business Continuity Planning or BCP is an important element in our overall corporate governance and
security plans and processes. BCP involves reviewing our entire DAFRIC operation to determining how
we conduct business, what tools, systems and equipment is required, and then creating a process for
responding in the event of a business disruption.

Some examples of potential business disruptions include:

1. Nature: winter storms, tornado, hurricane, etc.;
2. Human: national disturbance: terrorism, civil unrest; and,
3. Technical: A breakdown in our infrastructure: loss of our network, telephone or other critical
business systems.

Each department is responsible for current and comprehensive BCP. When implemented, the BCP
includes those procedures and support agreements which insure on-time availability and delivery of
required products and services. Each BCP must be certified annually with the BCP policy compliance
process through the DAFRIC Technical Operations team.

Resolution of issues in the development of or support for all BCP(s) are coordinated with the BCP team
and appropriate internal or external organizations.

Copies of the applicable BCP(s) may be obtained from your Account Representative.

Dr Aminu Tajudeen Dantata

7th July,2024

PROPRIETARY AND CONFIDENTIAL

© 2024 Dafric Global Resources. All rights reserved.

1 |Pag
e Dafric Global Resources Business Continuity
Policy
 BUSINESS CONTINUITY POLICY

4. INTRODUCTION

DAFRIC GLOBAL RESOURCES recognizes the importance of business continuity planning to ensure the
uninterrupted operation of its critical business processes in the event of disruptions such as natural disasters,
technology failures, or other emergencies. This Business Continuity Policy outlines the principles and
practices that guide the Company's approach to business continuity planning.

5. PURPOSE

The purpose of this Policy is to ensure that our organization has a framework in place to continue
providing services to our customers in the event of an unexpected event or emergency. This Policy is
designed to ensure that our organization can continue to operate while minimizing the impact of the
disruption.

6. SCOPE

This Policy applies to all employees, contractors, vendors, and third parties who are involved in the
planning, implementation, and execution of business continu ity efforts within the Company. It also
encompasses all critical business processes, systems, and operations that are vital to the continued
operation of the Company.

7. BUSINESS CONTINUITY PLANNING

DAFRIC GLOBAL RESOURCES will develop, implement, and maintain a comprehensive Business Continuity
Plan that addresses the identification, assessment, mitigation, response, and recovery from potential
disruptions.The Business Continuity Plan will include,but not be limited to, the following components:

• Risk Assessment: The Company will conduct a thorough risk assessment to identify potential
risks and vulnerabilities that could disrupt its critical business processes. The risk assessment will
consider various scenarios and their potential impacts on the Company's operations, customers,
employees, and stakeholders.

• Mitigation Measures : Based on the risk assessment , the Company will implement
appropriate mitigation measures to reduce the likelihood and severity of potential disruptions.
This may include redundancy and backup of critical systems and data, alternative
communication methods, offsite data storage, and other measures as deemed necessary.

• Response and Recovery Plans: The Company will develop Response and Recovery Plans
that outline the steps to be taken in the event of a disruption. These plans will include roles,
responsibilities, communication procedures, alternative work arrangements, and other relevant
information to facilitate a timely and coordinated response and recovery.

• Roles, Responsibilities and Resource Provision : The Dafric’s Business Continuity

Management System and the purpose of the BCP plans are the responsibility of the Senior Director
of Dafric Global Resources. Members of the BC Team take action to update the communication
plan, organization charts and the BCMS documentation set. Leadership is provided by site and
functional primes called the Emergency Management Team (EMT). The EMT performs duties
2 |Pag
e Dafric Global Resources Business Continuity
Policy
 during BCP drills and actual trigger events, and represents the whole Dafric organization by seeing
recovery and restoration actions through to completion.
The BCMS is championed by the Chief Legal Officer (CLO) within the Executive Management
Team, who offers business direction, resourcing and objectives to ensure the BC arrangements are
in alignment and meet corporate goals.
All Dafric employees are trained in general BCP awareness. Detailed specific continued operations
training is identified and issued to those who require it.

5. BCMS Documented Process

The BCMS documentation set is updated, at least annually, and when business dictates a requirement to do
so, included in this set is:

 Business Continuity Policy with Leadership Signatory

 Management System Overview containing BCMS Scope
 BCMS health reporting via KPIs and the BC Objectives
 BIA (Impact Analysis), Risk Assessments and Appetite for Risk
 Incident Response Structure (complete with ticket-tracking integration)
 The BCP, Disaster Recovery Plans and Training materials
 Schedule for drills, results of drills and other action items history
 Annual management review slides, Minutes and the Corrective Actions Register (via CAR database)

The BMCS delivers vital information which is critical to decision making at Dafric during a trigger event.
Preparedness comes from understanding our business objectives; these tools deliver answers to the pertinent
questions, such as:
 What are our key services and products?
 What are the regional and international dependencies to key activities?
 Where can alternative sources of service be located?
Making our employees aware of our BC arrangements reduces anxiety of what might happen to ongoing
operations if a site were to be severely impacted by an event. The demonstration of the health of our BCP to
our business leaders comes from our drills and training. Annual management reviews allow Dafric to align
on the resourcing required to ensure continuous improvement and the overall health of the BC Plans.

6. Dafric Internal Organization

To ensure an internal communication plan remains current and effective, the organizational structure is
reviewed directly after any significant internal reorganization activity and during every BC Drill Exercise.

Key Risk Assessments Sources

We take advice from credible sources such as professional organizations and industry leaders to
construct the Current Risk Register. Our sources include ITU-T SG 2, ITU -TDR/EW, NCC, CPNI, UN,
and WHO. We consider the locations of our facilities and use historical and current evidence to
augment the register of risks considered.

Key Services
The key objective of the BC arrangements is to maintain, where possible, Key Services with minimal
disruption. Our Key Services are:

3 |Pag
e Dafric Global Resources Business Continuity
Policy
  Infrastructure Sharing and Colocation – providing Data Center, BTS Remodeling, Full Co-Location
where it would own 100% of all tower infrastructure on-site, including power generation. In this model,
the telecos would simply lease space on the tower on a contractual basis. network management and
Kandy integration.
 Value Added Services - Bulk Sms, USSD -Short codes, Cloud PBX, Call Center and Contact Center,
Interactive Voice Response (IVR), Vanity Numbers, Internet Service (FTTH) to as complex as a secure
SIP Trunking IP-Voice Network
 3rd Party Development and Manufacturing – R&D, Supply Chain and Order Fulfilment have regular
reviews to ensure that our BC requirements are accommodated by our suppliers as detailed in our
contracts with them. Supplier disruption minimization strategies are in place to limit the disruption caused
when supply lines fail.
 Software Development and Hardware Research – R&D at one of our four key research sites has been
arranged in such a way to ensure duplication across sites of both infrastructure and expertise. This
redundancy allows the movement of knowledge to further increase the flexibility of the Dafric workforce.
 Public Presence – www.dafricsms.ng is our global window to share information about Dafric globally
including our corporate BC Policy for our stakeholders.

In conclusion, the Dafric-operated Business Continuity Management System covers all staff and all sites, all
products and all operations. It works hard to exercise the BC plans which are generated from all areas of the
business. The BCMS aims to identify the risks and the arrangements in place to mitigate those risks. Activities
are performed to enhance the robustness of the arrangements for the security of the business and to improve
delivery to our stakeholders in times of crisis. Measurements are taken to track the improvements and allow
communication of progress to the Executive Management Team.
For more information, please email [email protected] or contact your sales lead.

4 |Pag
e Dafric Global Resources Business Continuity
Policy