Business Continuity

Built for continuity. Designed for resilience.

Verto supports organisations delivering complex projects, programmes and portfolios.

Our approach to business continuity, disaster recovery and service resilience is designed to minimise disruption, protect customer data and support the continued availability of the Verto platform.

Resilient Cloud Infrastructure Network with Shield

Continuity you can rely on

Keeping critical work moving

Public sector organisations depend on consistent access to accurate information, clear reporting and reliable systems.

Our approach is set out in our Information Security Continuity Plan, part of our ISO 27001-certified Information Security Management System. It covers the infrastructure that hosts Verto, the systems our team relies on, and how we respond to, continue through and recover from significant disruption.

Service Resilience

How we support service continuity

Resilient cloud hosting

Verto is hosted in Microsoft Azure and load balanced across multiple web servers. If one server fails, traffic is automatically routed to another so the service keeps running.

Backup and recovery

Customer databases are backed up to an immutable, geo-redundant, encrypted Azure Recovery Services vault, with backups held in two separate UK regions.

Proactive monitoring

The Verto service is proactively monitored so that disruption can be identified quickly, investigated and responded to.

A UK-based, remote-first team

Our team works remotely across the UK, so there is no single office to lose. Work is stored centrally, so it continues if a device or location becomes unavailable.

Incident Response

A structured response to disruption

Our Information Security Continuity Plan sets out how we respond to significant incidents, including cloud and server outages, cyber attacks and the loss of a key supplier.

When the plan is activated, a Business Continuity Team of senior staff leads the response. Client access to Verto is treated as a critical activity and is prioritised throughout.

Information security controls stay in place during an incident, with any temporary exceptions defined in advance.

Three phases of response

1

Incident management

Assess the incident, protect people and contact the right stakeholders.
2

Business continuity

Keep critical services running while the issue is resolved.
3

Recovery and resumption

Return to normal operations, then review the incident and update the plan.

Testing

Tested, reviewed and improved

The plan is tested at least once a year through simulated incidents and checks that staff know their role when it is activated.

After every test or real incident, we review what happened and update the plan with the lessons learned.

The plan is owned by our Information Security Manager and maintained within our ISO 27001 management system, which is independently audited.

Tested at least annually

Simulated incidents and staff knowledge checks.

Two UK backup regions

Backups held in separate UK Azure regions.

Load-balanced hosting

Verto runs across multiple web servers in Microsoft Azure.

Security & Governance

Part of our wider approach to security

Business continuity is part of how we protect the confidentiality, integrity and availability of the Verto service.

TMI Systems, the company behind Verto, is certified to ISO 27001 and Cyber Essentials.

Communication

Clear communication when it matters

If an incident affects the Verto service, our client team contacts customers directly, by email or by phone if email is unavailable.

Updates explain what has happened, how long disruption is expected to last and how to reach us. When service is restored, we confirm it and tell you whether any data was affected.

How Verto compares