Updated 5/8/2013

All-In-One, Inc. d/b/a

Business Continuity and Disaster Preparedness Plan

1

Updated 5/8/2013

Table of Contents
Document Objective I. Purpose......... 3 Business Location and Crisis Managers I. Business Location. 4 II. Crisis Managers..... 4 Emergency Contact Information........... 5 AIO Essential Business Partners / External Collaboration Members... 5 Plan Scope I. Remote Danger to Employees and Visitors. 6 II. Immediate and Direct Threat to Persons on Site. 6 III. Site is Inaccessible from External Locations... 6 Situational Procedures I. Level 1 Evacuation.. 7 II. Level 2 Shelter-In-Place.. 8 III. Level 3 Alternate Location.. 9 Cyber Security and Data Backup I. Cyber Security.... 10 II. Data Backup.. 10 Employee Emergency Contact Information... 11 Plan Updates and Distribution 11 Authentication of Document.. 12

Updated 5/8/2013

Document Objective
I. Purpose
AIOs mission to provide safe and fun activities to its visitors will be disrupted at some point, though we will not know at what time or in what manner. This uncertainty is addressed in the following pages, where future stressors and obstacles to the organization are anticipated, analyzed and countered by careful planning and direction. The detailed situations and strategies indicated throughout this document will be implemented in the event of any unexpected and afflictive events in order to mitigate their effect of on AIOs essential operations. It is extremely important that all AIO employees read and fully understand the content of AIOs Business Continuity and Disaster Preparedness Plan. As will soon be indicated, all employees will play significant roles in carrying out this plan, on which the safety and satisfaction of our visitors and AIO team, as well as our essential business functions rely. We ask that in the event of such an emergency, all employees remain calm and abide by the following Plan to all extents possible. If a unique and dangerous situation arises that forces employees to stray from the Plan, we ask that the employees use their best judgment with concern for the safety and well-being of our AIO visitors, themselves, and other members of the AIO team. At any time, any AIO employee feeling unsure or confused about not only their role, but the overall procedures and effects of the Plan, is encouraged to seek review or clarification of the contents of the Plan from any member of the AIO Emergency Management Team (listed below). Electronic and paper copies of the Plan will be distributed upon request for review, and we ask that any concerns are addressed in a meeting with AIO Emergency Management Team members directly. As always, we appreciate the cooperation and commitment of our AIO staff team.

Sincerely, the AIO Emergency Management Team:

Michelle L. Blasz Chief Operations Officer 716-691-9265 716-777-4842 mlblasz@AIO.com

Carly R. Hacker Chief Executive Officer 716-276-8432 716-777-4840 crhacker@AIO.com

Joseph A. Fedele Chief Financial Officer 716-283-4972 716-777-4841 jafedele@AIO.com

Updated 5/8/2013

Business Location and Crisis Managers

I. Location
AIO (and all of its essential business functions) is located at: 3100 Lake Shore Road (Route 5) Blasdell, NY 14219
`

II.

Crisis Managers
Primary Emergency Contact / AIO Spokesperson: Michelle L. Blasz Chief Operations Officer 716-691-9265 716-777-4842 mlblasz@AIO.com Secondary Emergency Contact / Alternate AIO Spokesperson: Carly R. Hacker Chief Executive Officer 716-276-8432 716-777-4840 crhacker@AIO.com
4

Updated 5/8/2013

Emergency Contact Information

** In an emergency, please dial 911 first ** Blasdell Police..................... (716) 851-4415 Buffalo Water Authority...................... (716) 847-1065 Allstate Insurance, Annette K. Winder (716) 649-0325 5555 Camp Road, Hamburg NY 14075 National Fuel Gas......... 1-800-444-3130 National Grid (Electric).... 1-800-867-5222 Time Warner Cable (Internet/Phone)... 1-866-826-1948 Erie Country Sewer Authority.. (716) 823-8188

AIO Essential Business Partners / External Collaboration Members

Rich Products Corporation. (716) 878-8000 One Robert Rich Way, Buffalo, NY 14213 Rich Products is an essential supplier of frozen food products for the AIO Bar & Grill function. We have worked with them for procedures regarding cancellation of orders/deliveries in the event of a business disruption. Republic Steel (716) 827-8213 3049 Lakeshore Road, Blasdell, NY 14219 Republic Steel is an emergency planning collaborative as a valuable neighboring organization. We have worked with the Blasdell location management to create our evacuation plan, which makes use of Republic Steels parking lot as a gathering site for AIO visitors and employees.

Updated 5/8/2013

Plan Scope
The AIO Emergency Management Team has analyzed the essential business functions of the organization, and established comprehensive plans to be implemented in the event of the following types of situations. Taking into account the means and focus by which AIO operates, we have considered these to be the circumstances most threatening, and have presented them in detail for careful identification in practice.

I.

Remote Danger to Employees and Visitors

This title covers any situation in which remaining on the AIO business location site would pose a threat to the safety or health of AIO employees and visitors. Examples of this type of situation may include smoke or fire in any of AIOs functional areas, a natural gas leak within the building, or the potential of explosives or hazardous waste on site.. Visitors and employees will be notified of the existence of a situation of this type from a member of the AIO Emergency Management Team via the site-wide PA system. It will be announced promptly as a Level 1 Evacuation, and employees are asked to abide by the associated plan dictated on the following pages.

II.

Immediate and Direct Threat to Persons on Site

This title covers any situation in which leaving the premises or even remaining in the normal operative positions on location poses a threat to the health or safety of all individuals present. Examples of this type of situation may include sudden and extreme weather conditions, such as tornado-like winds, harsh blizzard conditions, and severe lightning storms, during hours of operation, or threat of violence or terror by a visitor, employee, or intruder anywhere at the AIO location. Visitors and employees will be notified of the existence of a situation of this type from a member of the AIO Emergency Management Team via the site-wide PA system. It will be announced promptly as a Level 2 Shelter-In-Place, and employees are asked to abide by the associated plan dictated on the following pages.

III. Site is Inaccessible from External Locations

This title covers any situation in which AIO employees and visitors cannot safely and/or legally get to or enter the AIO premises. Examples of this type of situation may include imminent or happening extreme weather conditions, such as tornado-like winds, harsh blizzard conditions, and severe lightning storms, before hours of operation, structural or breathing air integrity at the site has been compromised, or a ban on travel or community lockdown has been established by local authorities. Scheduled visitors and employees will be notified of a situation of this type by telephone and local media closings announcements. The situation will be indicated as a Level 3 Alternate Location to AIO employees.
6

Updated 5/8/2013

Situational Procedures
I. Level 1 Evacuation:
ASSEMBLY SITE: Republic Steel parking lot 3049 Lake Shore Road, Blasdell, NY 14219

1. In the event of a remote danger to employees and visitors, a member of the AIO Emergency Management Team will announce across the sitewide (including outdoor areas) audio system the need for a full evacuation of the premises. 2. Employees will gather visitors under their watch, and calmly instruct and lead them outside and across Lake Shore Road (Route 5) to the above indicated assembly site. 3. Primary or Secondary Emergency Contact will contact most appropriate emergency resource(s) immediately following his or her safe exit and retreat from AIO location. 4. Most senior AIO Maintenance/Grounds staff member will perform a quick sweep of the premises to ensure all visitors and employees have exited safely, only when it does not put him or her in unreasonable danger. 5. Assembly site managers (one for each AIO functional division) will meet employees and their groups of visitors at the assembly site. Dressed in orange vests and hats, and equipped with mobile communication devices and attendee lists, assembly site managers will request medical assistance for any individual in the gathered group in need. 6. Once medical attention (if needed) has been called for, assembly site managers will call role of AIO employees present and visitors scheduled if individuals names have been made available. 7. Assembly site managers will utilize the mobile communication devices to obtain updates and instruction from AIOs Primary or Secondary Emergency Contact. 8. Primary and/or Secondary Emergency Contact will work closely with external emergency resources to identify the problem and mitigate the damage. He or she is ultimately responsible for issuing the all-clear, as well as speaking with authorities or media if need be.

**The audio warning system will be tested monthly and these Evacuation procedures will be tested /practiced in full implementation 4 times per year during regular business operation.
7

Updated 5/8/2013

II.

Level 2 Shelter-In-Place:
ASSEMBLY SITE: AIO Bar & Grill basement level 3100 Lake Shore Road, Blasdell, NY 14219

1. In the event of an immediate and direct threat to persons on site, a member of the AIO Emergency Management Team will announce across the site-wide (including outdoor areas) audio system the need to take on-site shelter immediately. 2. Employees will gather visitors under their watch, and calmly instruct and lead them to the basement assembly area of the AIO Bar & Grill. 3. Primary or Secondary Emergency Contact will contact most appropriate emergency resource(s) immediately following his or her safe arrival at the AIO basement assembly area. 4. Most senior AIO Maintenance/Grounds staff member will perform a quick sweep of the premises to ensure all visitors and employees have exited safely, only when it does not put him or her in unreasonable danger. 5. Assembly site managers (one for each AIO functional division) will meet employees and their groups of visitors at the basement assembly site. Dressed in orange vests and hats, and equipped with mobile communication devices and attendee lists, assembly site managers will request medical assistance for any individual in the gathered group in need. 6. Once medical attention (if needed) has been called for, assembly site managers will call role of AIO employees present and visitors scheduled if individuals names have been made available. 7. Assembly site managers will utilize the mobile communication devices or meet with AIOs Primary or Secondary Emergency Contact at the assembly site for updates and instruction. 8. Primary and/or Secondary Emergency Contact will work closely with external emergency resources via mobile communication devices to assess the situation and mitigate the damage, with personal safety of visitors and AIO employees as the biggest priority. He or she is ultimately responsible for issuing the all-clear, as well as speaking with authorities or media if need be.

**The audio warning system will be tested monthly and these Shelter-InPlace procedures will be tested /practiced in full implementation once per year outside regular business operation.

Updated 5/8/2013

III. Level 3 Alternate Location:

**Due to the unique and diverse business functions of AIO, including the vast equipment needed, it is not feasible for us to fully operate at an alternate location. In the event that the AIO site is inaccessible from external locations, the Sportsplex, Lodging facilities, and Bar & Grill functions will cease for the entire period of time our primary location is unreachable. 1. If the closing of the AIO facilities is not forced by municipal directions, AIO executives will meet in person or via phone to make the decision of whether it is safe to remain open or that AIO must close its facilities in the interest of visitor and employee safety. 2. As soon as the decision to close the AIO facilities is made, the CEO will be responsible for notifying local media (television and radio news outlets), as well as key business partners of AIOs temporary close. 3. Managers of the three AIO functions (Sportsplex Manager, Lodging Manager, and Bar & Grill Manager) will be responsible for contacting employees and scheduled visitors from their home offices in order to notify the employees and visitors of the closing situation, as well as to answer questions visitors may have. 4. The Honeywell automatic generator is programmed to kick on in the event of prolonged electricity loss. It will run the food stores for the AIO Bar Grill as well as keep the facility heated to 38F to prevent freezing if temperatures drop below this point. Although the Sportsplex, Lodging facilities, and Bar & Grill will not be operational in the event of a Level 3 situation, AIOs business functions will need to continue. 5. Executives and upper management will continue to perform their regular work via their AIO-distributed Laptops from their own homes. 6. Accounts payable, receivable, and payroll will be completed by the accounting staff also on their AIO-distributed laptops from home, and the CFO will be responsible for ensuring such continued financial tasks and recording procedures. 7. Any meetings that must take place in person will occur at CEOs home office (currently Carly R. Hacker, 6814 Oak Street, North Collins, NY 14111), but ONLY if travel has not been banned by municipal authorities and they travel does not put AIO executives in unreasonable danger of harm.

Updated 5/8/2013

Cyber Security and Data Backup

I. Cyber Security
Software: The AIO local network is equipped with Cisco firewall protection, and all AIO computers are protected with Kaspersky Antivirus software. Hardware: AIO computer hardware is protected by customized personal password capabilities, and the equipment is kept in locked offices or in the possession of manager or executive users at all times. Because all AIO computer capabilities will be handled on AIO-distributed laptops which travel home with users each night, destruction of on-site equipment will not be an issue. Executives and managers will utilize their laptops from their home offices to continue to complete essential business recording and communication functions.

II.

Data Backup
Quickbooks, AIOs accounting system software, is responsible for backing up our critical records, including payroll, accounting, and booking systems. Consistent with our paperless business strategy, we do not keep paper copies of accounting records on site. They will be accessed from the Quickbooks cloud. Digital copies of important non-accounting records (continuity plans, site maps, insurance policies, bank account records, and computer backups) will be backed up with the Norton Online Backup and accessible from external locations.

10

Updated 5/8/2013

Employee Emergency Contact Information

** To be updated as AIO team members are hired Employee Name Blasz, Michelle L. Bowman, Alex B. Fedele, Joseph A. Hacker, Carly R. Hill, Alex. C. Keenehan, Alicia D. Current Position Chief Operations Officer AIO Sportsplex Manager Chief Financial Officer Chief Executive Officer Chief Marketing Officer AIO Bar & Grill Manager Off-location Number 716-691-9265 716-998-3323 716-283-4972 716-276-8432 716-688-7154 716-948-3387 Emergency Contact 716-524-9804 716-653-4117 716-824-6652 716-746-0749 716-348-2667 716-628-1678

Plan Updates and Distribution

The AIO Business Continuity and Disaster Preparedness Plan will be continuously reviewed and updated annually by the AIO Emergency Management Team. The contents of the Plan are distributed to and reviewed with new AIO employees upon their starting work. A yearly meeting is held with all employees to review the plan and cover any updates or revisions that have been made. As is previously stated, questions about the Plan should be directed toward the AIO Emergency Management Team.

11

Updated 5/8/2013

Authentication of Document
This official document was prepared and reviewed by the AIO Emergency Management Team. Latest version updated May 8, 2013.

Michelle L. Blasz
Michelle L. Blasz Chief Operations Officer

Carly R. Hacker
Carly R. Hacker Chief Executive Officer

Joseph A. Fedele
Joseph A. Fedele Chief Financial Officer

12