Structure of Oracle Risk Management Resiliency Program

The RMRP program Is comprised of four Risk Management functions:

1. 1. Emergency Response, managed by Real Estate Facilities Environment, Health and Safety Program
2. 2. Crisis Management, managed by Global Physical Security
3. 3. Business Continuity Management, managed by the corporate RMRP Program Management Office and operated by LOBs
4. 4. Disaster Recovery, managed by LOBs, Information Technology teams and cloud Operations teams

At the global level, the RMRP is sponsored by senior executives. This executive focus is designed to engage appropriate levels of management in bringing resources to bear on a situation. Regional Crisis Management Teams (RCMTs) advise and consult the executive team.

At the regional level, multiple RCMTs are comprised of senior management who can make decisions and authorize the Crisis Commander to act on escalated matters.

At the local level, the RMRP is implemented via a Local Crisis Management Team (LCMT). The LCMT is comprised of a Crisis Commander and representatives from each relevant LOB for the impacted location. This team collects and disseminates information about a local crisis and executes an Emergency Response Action Plan to address personnel safety. When necessary, an LOB activates their own local business-resiliency plans to maintain critical business functions. The Crisis Commander funnels this information and escalates any issues to the Regional Crisis Management Team (RCMT) RISK MANAGEMENT RESILIENCY Business continuity.