(Mr. Krirk Vanikkul) Assistant Governor, Financial Institutions Policy Group Governor For

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "(Mr. Krirk Vanikkul) Assistant Governor, Financial Institutions Policy Group Governor For"

Transcription

1 Unofficial Translation by the courtesy of The Foreign Banks' Association This translation is for the convenience of those unfamiliar with the Thai language. Please refer to the Thai text for the official version BANK OF THAILAND To Managers All Commercial Banks 5 July 2006 No.: ThorPorTor. ForNorSor. (21) Wor. 896/2549 Re: Submission of the Draft of the Guideline on Business Continuity Management (BCM) and Preparation of Business Continuity Plan (BCP) of Financial Institutions At present, events and external factors, which may impact financial institutions operations, have become volatile; such [factors] are floods, hurricanes, fires, acts of terrorism, epidemics, etc. These disastrous events may render a financial institution incapable of providing continuing services to the customers, which in turn may affect the reputation of and confidence on such financial institution. It also may produce a knock-on effect on the entire financial institution system. As such, the Bank of Thailand (BOT) deems appropriate that financial institutions should prepare business continuity plans to enable their businesses to be continued during disastrous events and to restore normality to their operations within suitable time. The BOT hence issued this drafted guideline with the objective of making financial institutions aware of the importance of having sound BCM and BCP as well as to serve as guidance for the development of the management system and for preparing the BCM and BCP for those financial institutions currently in the preparation process or those that have not yet developed any BCM or BCP. This drafted guideline provides guidance and addresses crucial issues in preparing of the BCM and BCP of financial institutions; whereas each financial institution must determine how to adapt it, and specify details commensurate with the nature and sophistication of its businesses. The BOT hereby submits the drafted guideline for financial institutions to express their opinions on the said draft. Should a financial institution have any comment or suggestion, please submit them in writing to the Operational and Liquidity Risk Division, Risk Policy Department of the BOT, via fax, no or via addresses listed in the drafted guideline no later than 15 August The BOT will collect and use the comments and suggestions to improve the clarity and suitability of the drafted guideline. Financial institutions may further study the principle from the website of the Basel Committee on Banking Supervision at Risk Policy Department Tel.: and Note: Yours Sincerely, (Mr. Krirk Vanikkul) Assistant Governor, Financial Institutions Policy Group Governor For [ ] The BOT will arrange a clarification meeting on at. [X] No clarification meeting will be arranged BOT Notification No ( ).doc Page 1 of 1

2 Draft Guideline on Business Continuity Management (BCM) and Preparation of Business Continuity Plan (BCP) of Financial Institutions Prepared by Operational and Liquidity Risk Division Risk Policy Department Financial Institutions Policy Group The Bank of Thailand Tel: (02) , , Fax: (02) BOT Notification No ( ).doc Page 2 of 2

3 EXECUTIVE SUMMARY This guideline contains the guidance and key issues to the preparation of BCM and BCP of financial institutions. Each financial institution must determine how to adapt it and specify details appropriate to the nature and sophistication of its business. Important Codes to be Observed by Financial Institutions The board of directors and senior management are responsible for formulating strategies and policy of the business continuity management of the financial institution and consider the risk of managing and supervising such business continuity as a part of the overall risk management of the bank, which may be considered as a part of operational risk management. Moreover, adequate resources shall be allocated to support the management of the said risk. Financial institutions should identify the critical business functions and assess the risk and impact that may occurs from the disruption of these crucial business functions, as well as specify strategies to restore the systems to normality and set a recovery time suitable to each function. Financial institutions should have written business continuity plans. The plans must cover all critical business functions of the organization including subsidiaries or affiliated companies which provide specific services to the financial institution and other key the service providers related to the crucial functions, resources or utility systems. Financial institutions should conduct testing and reviewing on the business continuity plans on the functional level and organizational level at least once a year or upon changes of factors which materially affect the risk of disruption to the business operations. In the event of a disruption to the service of any critical business function, the financial institution should notify the Bank of Thailand at the first opportunity but not exceeding 24 hours. In addition, detailed report of the event, procedures and period expected to resolve the problems as well as when the operations may return to normal shall also be reported to the Bank of Thailand. Financial institutions should set policies for business continuity management and prepare the business continuity plans within 12 months. If any financial institution is unable to complete it within the specified deadline, it shall advise the reasons and make progress report to the Bank of Thailand. BOT Notification No ( ).doc Page 3 of 3

4 Table of Contents Subject Page Number 1. Rationale for the Guideline 1 2. Definitions 2 3. Details of Guideline 3 Board and Senior Management Responsibility 4 Analysis and Evaluation of the Impact of Major Operational Disruptions 4 Recovery Objectives 5 Business Continuity Planning 6 Communications and Trainings 7 Testing and Reviewing 7 Reporting to the Bank of Thailand 8 BOT Notification No ( ).doc Page 4 of 4

5 -Draft- Guideline on Business Continuity Management (BCM) and Preparation of Business Continuity Plan (BCP) of Financial Institutions 1. Rationale for the Guideline In present days, financial institutions in conducting their business must confront significant risks in several areas. Operational risk is considered one of the important risks for financial institutions. Although financial institutions may already have effective control systems but certain risks are unpreventable such as accidents, natural disasters, fires, hurricanes, acts of terrorism and epidemics, etc. A crucial measure to alleviate the degree of the impact from the occurrences of such events is business continuity management (BCM) and business continuity plan (BCP). Previously the Bank of Thailand (BOT) had issued a guideline on the preparation of contingency plan for information technology on 12 October 2005 and the financial institutions have already undertaken a certain level of preparation. Moreover, the Basel Committee on Banking Supervision (BCBS) recognizes the necessity and importance of business continuity management by issuing a consultative paper on High-Level Principles for Business Continuity in December The BOT hence prepared this guideline to serve as a guide for the boards of directors and senior managements of financial institutions in formulating business continuity management policies, which shall mean the guideline for setting policies, standards and operating procedures of the entire organization, to ensure that in the event of a disruption of the operations, critical business functions shall be continued or resumed in a timely fashion. A sound business continuity management will alleviate the financial, legal, reputational or other impacts that may occur to financial institutions. 2. Scope of Application It is applicable to all commercial banks under the law governing commercial banking. 3. Effective Date The guideline on business continuity management (BCM) and preparation of business continuity plan of financial institutions shall be effective from onward. BOT Notification No ( ).doc Page 5 of 5

6 4. Definitions Term Definition Particular Business Continuity Management (BCM) Business continuity management Guideline for setting policies, standards and procedures for the entire organization to ensure that upon a disruption the critical business functions will be able to be maintained or recovered in a timely fashion. Business Continuity Plan (BCP) Business continuity plan A written plan that sets out the procedures and processes to maintain or restore the systems to normality enabling business to be continued in the event of disruption. Critical Business Functions Critical business functions Functions which, upon a disruption, may have material impact on the operations, business, reputation, standings and performance of the financial institution. Business Impact Analysis (BIA) Business impact analysis A process of analyzing and measuring the business impact or loss, both quantitative and qualitative, incurred from the disruption. Recovery Objectives Recovery objectives A goal for recovering the system which consists of recovery strategy and recovery time objectives. Recovery Strategy Recovery strategy A guideline to respond to the disruption of critical operations. Recovery Time Objectives Minimum downtime A pre-specified duration which operations may be allowed to be interrupted. Alternative Sites Alternative operating center A site used to conduct substituting operations and continue business upon an event of disruption. BOT Notification No ( ).doc Page 6 of 6

7 Details of Guideline The business continuity management (BCM) consists of the following components. Business Continuity Management (BCM) Formulation of Policies on Business Continuity Managemen 1. Board and Senior Management Responsibility Identifying and Assessing Risks 2. Analysis and Evaluation of the Impact of Major Operational Disruptions - Identifying Critical Business Functions - Risk Assessment - Business Impact Analysis 3. Setting Recovery Objectives - Setting Recovery Strategy - Setting Recovery Time Objectives Preparation of the Plan 4. Business Continuity Planning 5. Communications and Trainings Monitoring and Evaluating Outcomes 6. Testing and Reviewing of the Business Continuity Plans BOT Notification No ( ).doc Page 7 of 7

8 Board and Senior Management Responsibility The board and senior management are responsible for formulating strategies and policies of business continuity management of the financial institution. The board may assign the task to a working committee or the senior management. However, the assignment must be in writing. The senior management must set a clear structure, duties and line of authority of relevant personnel based on the approved business continuity management policies. In addition, the board and senior management must consider the business continuity risks and controls as a part of the risk management. Large financial institutions with complex operations may establish specific units to oversee their business continuity management. 2. Analysis and Evaluation of the Impact of Major Operational Disruptions Analysis and assessment of the impact of major operational disruptions comprise of the following processes. 1. Identifying Critical Business Functions Financial institutions should identify critical business functions of which a disruption may have material impact on the operations, reputation and performance of the financial institutions. The financial institutions must specify clear criteria for determining priority of each of the critical functions. 2. Risk Assessment Financial institutions should conduct risk assessment from the disruption of critical business functions at least once a year or upon significant changes of internal or external factors which may affect these risks. They should identify possible irregular events that may impact them in short, medium and long runs as well as assess the probability of the occurrence of such events. Examples of possible critical disruptions are buildings and surrounding areas are damaged, buildings are inaccessible for a length of time, information technology systems are damaged, loss of crucial personnel either temporarily and permanently, etc. 3. Business Impact Analysis Financial institutions should analyze the impact from the possible events that may occur to the critical business functions. Such analyses should take into account the effects on depositors, financial and reputational impact, loss of income, degree of difficulty and recovery time or other alternatives, and impact on compliance with regulations of the authorities, etc. The business impact analyses should be conducted for all functions in the organization including subsidiaries or affiliated companies providing specific services for the financial institution and other main service providers related to the functions. These units should also take part in the business impact analyses. BOT Notification No ( ).doc Page 8 of 8

9 BOT Notification No ( ).doc Page 9 of 9-5- Financial institutions should conduct gap analyses between the business continuity plans currently being used and actions required for restoring the business to normality within the target time and meeting the stipulated goals. 3. Setting Recovery Objectives 1. Setting Recovery Strategy Financial institutions should take the outcomes derived from the business impact analyses into consideration in setting recovery strategies. The senior management must allocate adequate resources and budget for the relevant units to implement such strategies. Furthermore financial institutions may consider getting insurance to reduce loss from the irregular events that may occur. Nevertheless, insurance is not a replacement for the business continuity management because restoring business is not the main objective of insurance. 2. Setting Recovery Time Objectives Financial institutions should establish recovery time objectives for the critical business functions as well as prioritize the functions required to be restored to the normal situation and within relevant timeframe. The recovery time objectives must be approved by the board of directors and senior management of the financial institution. Additionally a comparison should be made between its recovery time objectives and those of other financial institutions. 4. Business Continuity Planning The business continuity plan (BCP) is a written plan that sets out the procedures and processes to maintain or recover systems enabling business to be continued in the event of a disruption. A business continuity plan includes repairing and rebuilding of damaged systems, premises or utility systems back to the normal operable condition. A financial institution should always possess a current business continuity plan that is already approved by its board of directors, authorized working committee or senior management. The business continuity plan should cover all critical functions in the organization including subsidiaries or affiliated companies providing specific services for the financial institution and other key service providers related to the crucial functions, resources or utility systems. A business continuity plan should at least consist of the following. 1. Detailed procedures for implementing the recovery in the event of a disruption to restore the operations within the specified time. 2. Necessary resources to the operations including personnel, various computer equipments, telephones, facsimile machines, office supplies, contract documents, insurance policies, etc. 3. A plan to notify and communicate with relevant parties internal and external to the financial institution. It should specify names and contact numbers of the employees, customers, counterparties, service providers, supervisory authority and various important media and should be updated on an ongoing basis. Additionally it should specify the decision-making authority in order to maintain communication.

10 A plan to establish alternate sites. An alternative site should be located at a certain distance from the main site, far enough to avoid being similarly affected as the main site and not serviced by the same utility sources in order to prevent widespread effects. Furthermore, each function must take part in the business continuity planning for its unit. One set of all business continuity plans should be kept with the authorized person and another set should be kept off-site. In the case of outsourcing, the financial institution should instruct the key service providers to prepare their own business continuity plans as well. 5. Communications and Trainings Financial institutions should set plans for communicating within their organizations and with relevant external parties. The communication plan should clearly specify authorized staff, scope of responsibilities related to communication, names and contact numbers of the staff and relevant external parties, which may be set up as a call tree, procedures and communication channels as well as types of information that may be disclosed. Financial institutions should take into consideration the possibility of impact on relevant parties across national borders in the event of a disruption. The communication plan should specify the communication procedures with relevant cross-border parties in the event that such disruption affects the international financial system. Financial institutions should publicize and conduct trainings on the business continuity procedures to relevant parties on a regular basis. The training plan should address training for the entire organization and training of each business function to ensure that all relevant parties understand and are aware of their roles upon disastrous events. 6. Testing and Reviewing of the Business Continuity Plans Financial institutions responsible senior management should conduct testing and reviewing of the business continuity plans at least once a year or more, upon changes to the factors that materially impact the risk of disruption to ensure that the business continuity plans are effective and operable. Financial institutions should conduct regular testing and reviewing of the business continuity plans on the organizational level as well as the functional level. The testing should be conducted in conjunction with relevant parties such as the communication and telecommunication companies, other service providers and important counterparties, etc. It is to ensure that all related parties are familiar with the plans and sites and are capable of implementing the plans as intended. It should include the developing of the business continuity plans to improve effectiveness, suitability with the changing technology, operating processes, structure of commands or key personnel. Financial institutions should use the standards of the financial system as a framework. issues. The testing and reviewing of business continuity plans should address the following 1. Procedures for staff evacuation 2. Notification and communication plan 3. Ability to activate alternative sites within a specified time 4. Data backup and recovery 5. Security of premises and computer systems 6. Recovery of critical business functions BOT Notification No ( ).doc Page 10 of 10

11 - 7- In case of outsourcing, financial institutions must instruct the key service providers to conduct testing and reviewing of their business continuity plans at least once a year and to allow the financial institutions to participate in the testing to observe or monitor the outcome of the testing and reviewing of the service providers business continuity plans on a regular basis. For the purpose of check and balance, financial institutions may arrange for external experts to periodically evaluate their business continuity plans. Reporting to the Bank of Thailand In the event of a disruption of the service of any critical business functions which materially affects the depositors or customers of a financial institution, the financial institution should notify the Bank of Thailand at the first opportunity but not exceeding 24 hours as well as providing detail of the event, implementing procedures and period expected to rectify the problem. The financial institution shall notify the central point of contact (CPC) responsible for the financial institution. Upon restoring such financial service back to normal, the financial institution shall duly notify the Bank of Thailand. Financial institutions should complete establishing the business continuity management policies and business continuity plans within 12 months. If it is unable to complete it within the deadline, the financial institution shall advise the reasons and make progress report to the Bank of Thailand. Furthermore, financial institutions should also study the guideline for IT contingency plan and principles related to business continuity management issued by other relevant parties such as the Basel Committee on Banking Supervision (BCBS), Federal Financial Institutions Examination Council (FFIEC) and the Business Continuity Institute (BCI), etc. BOT Notification No ( ).doc Page 11 of 11

SUPERVISORY AND REGULATORY GUIDELINES: PU19-0406 BUSINESS CONTINUITY GUIDELINES

SUPERVISORY AND REGULATORY GUIDELINES: PU19-0406 BUSINESS CONTINUITY GUIDELINES SUPERVISORY AND REGULATORY GUIDELINES: PU19-0406 Business Continuity Issued: 1 st May, 2007 Revised: 14 th October 2008 BUSINESS CONTINUITY GUIDELINES I. INTRODUCTION The Central Bank of The Bahamas (

More information

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT

CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT CENTRAL BANK OF KENYA (CBK) PRUDENTIAL GUIDELINE ON BUSINESS CONTINUITY MANAGEMENT (BCM) FOR INSTITUTIONS LICENSED UNDER THE BANKING ACT JANUARY 2008 GUIDELINE ON BUSINESS CONTINUITY GUIDELINE CBK/PG/14

More information

Statement of Guidance

Statement of Guidance Statement of Guidance Business Continuity Management All Licensees 1. Statement of Objectives 1.1. To enhance the resilience of the financial sector and to minimise the potential impact of a major operational

More information

Unofficial Translation with the courtesy of The Foreign Banks' Association ------------------------------------------------------------------------

Unofficial Translation with the courtesy of The Foreign Banks' Association ------------------------------------------------------------------------ Unofficial Translation with the courtesy of The Foreign Banks' Association This translation is for the convenience of those unfamiliar with the Thai language. Please refer to the Thai text for the official

More information

Guideline on Business Continuity Management

Guideline on Business Continuity Management Circular No. 033/B/2009-DSB/AMCM (Date: 14/8/2009) Guideline on Business Continuity Management The Monetary Authority of Macao (AMCM), under the powers conferred by Article 9 of the Charter approved by

More information

Prudential Practice Guide

Prudential Practice Guide Prudential Practice Guide LPG 232 Business Continuity Management March 2007 www.apra.gov.au Australian Prudential Regulation Authority Disclaimer and copyright This prudential practice guide is not legal

More information

Prudential Practice Guide

Prudential Practice Guide Prudential Practice Guide SPG 232 Business Continuity Management July 2013 www.apra.gov.au Australian Prudential Regulation Authority Disclaimer and copyright This prudential practice guide is not legal

More information

Business Continuity Plan

Business Continuity Plan Business Continuity Plan October 2007 Agenda Business continuity plan definition Evolution of the business continuity plan Business continuity plan life cycle FFIEC & Business continuity plan Questions

More information

Please refer to the Thai text for the official version January 2007

Please refer to the Thai text for the official version January 2007 Unofficial Translation by the courtesy of The Foreign Banks' Association This translation is for the convenience of those unfamiliar with the Thai language. To Managers Please refer to the Thai text for

More information

Unofficial Translation prepared by Baker & McKenzie and with the courtesy of The Foreign Banks' Association

Unofficial Translation prepared by Baker & McKenzie and with the courtesy of The Foreign Banks' Association Unofficial Translation prepared by Baker & McKenzie and with the courtesy of The Foreign Banks' Association This translation is for the convenience of those unfamiliar with the Thai language. Please refer

More information

Prudential Standard LPS 232

Prudential Standard LPS 232 Prudential Standard LPS 232 Business Continuity Management Objective and key requirements of this Prudential Standard This Prudential Standard aims to ensure that each life company implements a whole of

More information

BUSINESS CONTINUITY MANAGEMENT GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS

BUSINESS CONTINUITY MANAGEMENT GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS BUSINESS CONTINUITY MANAGEMENT GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS DIRECTORATE OF BANKING SUPERVISION AUGUST 2009 TABLE OF CONTENTS PAGE 1.0 INTRODUCTION..3 1.1 Background...3 1.2 Citation...3

More information

: Chief Executive Officers of all Licensed Commercial Banks, Primary Dealers, Central Depository Systems (Pvt) Ltd. and LankaClear (Pvt.) Ltd.

: Chief Executive Officers of all Licensed Commercial Banks, Primary Dealers, Central Depository Systems (Pvt) Ltd. and LankaClear (Pvt.) Ltd. March 29, 2006 BCP Guidelines No: 01/2006 To : Chief Executive Officers of all Licensed Commercial Banks, Primary Dealers, Central Depository Systems (Pvt) Ltd. and LankaClear (Pvt.) Ltd. Introduction

More information

Business Continuity Management

Business Continuity Management Business Continuity Management cliftonlarsonallen.com Introductions Brian Pye CliftonLarsonAllen Senior Manager Business Risk Services group 15 years of experience with Business Continuity Megan Moore

More information

RESERVE BANK OF VANUATU OPERATIONAL RISK MANAGEMENT

RESERVE BANK OF VANUATU OPERATIONAL RISK MANAGEMENT RESERVE BANK OF VANUATU DOMESTIC BANK PRUDENTIAL GUIDELINE NO 12 OPERATIONAL RISK MANAGEMENT 1. This Guideline outlines a set of principles that provide a framework for the effective management of operational

More information

20 April 2006. To Manager All Commercial Banks*

20 April 2006. To Manager All Commercial Banks* Unofficial Translation by the courtesy of The Foreign Banks' Association This translation is for the convenience of those unfamiliar with the Thai language. Please refer to the Thai text for the official

More information

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning MARCH 2003 IT EXAMINATION H ANDBOOK

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning MARCH 2003 IT EXAMINATION H ANDBOOK Federal Financial Institutions Examination Council FFIEC Business Continuity Planning MARCH 2003 BCP IT EXAMINATION H ANDBOOK TABLE OF CONTENTS INTRODUCTION... 1 BOARD AND SENIOR MANAGEMENT RESPONSIBILITIES...

More information

Federal Financial Institutions Examination Council FFIEC. Business Continuity Planning BCP MARCH 2003 MARCH 2008 IT EXAMINATION

Federal Financial Institutions Examination Council FFIEC. Business Continuity Planning BCP MARCH 2003 MARCH 2008 IT EXAMINATION Federal Financial Institutions Examination Council FFIEC Business Continuity Planning MARCH 2003 MARCH 2008 BCP IT EXAMINATION H ANDBOOK TABLE OF CONTENTS INTRODUCTION... 1 BOARD AND SENIOR MANAGEMENT

More information

Guideline on risk management and other aspects of internal control in stock exchange

Guideline on risk management and other aspects of internal control in stock exchange until further notice 1 (11) Applicable to stock exchanges Guideline on risk management and other aspects of internal control in stock exchange By virtue of section 4, paragraph 2, of the Act on the Financial

More information

Guideline on risk management and other aspects of internal control in central securities depository

Guideline on risk management and other aspects of internal control in central securities depository until further notice 1 (11) Applicable to central securities depositories Guideline on risk management and other aspects of internal control in central securities depository By virtue of section 4, paragraph

More information

Business Continuity Planning Instructions

Business Continuity Planning Instructions Business Continuity Planning Instructions Business continuity planning is a proactive planning process that ensures critical services or products are delivered during a disruption. In creating the plan,

More information

Advisory Guidelines of the Financial Supervisory Authority. Requirements regarding the arrangement of operational risk management

Advisory Guidelines of the Financial Supervisory Authority. Requirements regarding the arrangement of operational risk management Advisory Guidelines of the Financial Supervisory Authority Requirements regarding the arrangement of operational risk management These Advisory Guidelines have established by resolution no. 63 of the Management

More information

Guidance Note XGN XXX.1

Guidance Note XGN XXX.1 Guidance Note XGN XXX.1 Risk Assessment and Business Continuity Planning 1. This Guidance Note provides further detail on matters institutions should consider in assessing disruption scenarios and certain

More information

Business Continuity Planning and Disaster Recovery Planning

Business Continuity Planning and Disaster Recovery Planning 4 Business Continuity Planning and Disaster Recovery Planning Basic Concepts 1. Business Continuity Management: Business Continuity means maintaining the uninterrupted availability of all key business

More information

Business Continuity Planning for Risk Reduction

Business Continuity Planning for Risk Reduction Business Continuity Planning for Risk Reduction Ion PLUMB ionplumb@yahoo.com Andreea ZAMFIR zamfir_andreea_ileana@yahoo.com Delia TUDOR tudordelia@yahoo.com Faculty of Management Academy of Economic Studies

More information

ESCB definitions of major business continuity terms in relation to payment and securities settlement systems 1

ESCB definitions of major business continuity terms in relation to payment and securities settlement systems 1 ESCB definitions of major business continuity terms in relation to payment and securities settlement systems 1 June 2007 The ESCB has developed a glossary of major business continuity terms for market

More information

JANSSEN PARTNERS, INC. Business Continuity Plan (BCP)

JANSSEN PARTNERS, INC. Business Continuity Plan (BCP) JANSSEN PARTNERS, INC. Business Continuity Plan (BCP) Emergency Contact Persons Our firm s two emergency contact persons are: Peter Janssen, President, Tel. 641-209-5940, Cell 516-456-7059, Fax 641-843-7036,

More information

Business Continuity. Disaster Recovery Plan

Business Continuity. Disaster Recovery Plan Business Continuity Disaster Recovery Plan Emergency Contact Persons Phyllis Hollis, President & CEO O: (212) 916 3888 Cell: (917) 804 8021 Email: phollis@cavusecurities.com Kinchen Bizzell, Managing Director,

More information

CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard

CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard PUBLIC Version: 1.0 CITY UNIVERSITY OF HONG KONG Business Continuity Management Standard (Approved by the Information Strategy and Governance Committee in December 2013; revision 1.1 approved by Chief

More information

Creating a Business Continuity Plan. What We ll Cover... What is a BCP? Micky Hogue, CRM

Creating a Business Continuity Plan. What We ll Cover... What is a BCP? Micky Hogue, CRM Creating a Business Continuity Plan Micky Hogue, CRM Sandia National Laboratories Albuquerque, NM 505-844-6640 Mlhogue@sandia.gov What We ll Cover... What is a Business Continuity Plan Why create a BCP?

More information

BUSINESS CONTINUITY MANAGEMENT REQUIREMENTS FOR SGX MEMBERS NEW RULES FOR INCLUSION IN SGX-ST RULES

BUSINESS CONTINUITY MANAGEMENT REQUIREMENTS FOR SGX MEMBERS NEW RULES FOR INCLUSION IN SGX-ST RULES BUSINESS CONTINUITY MANAGEMENT REQUIREMENTS FOR SGX MEMBERS NEW RULES FOR INCLUSION IN SGX-ST RULES New rule Current Rule Proposed Rule 4.6.21 Business Continuity Requirements The following requirements

More information

Table of Contents... 1

Table of Contents... 1 ... 1 Chapter 1 Introduction... 4 1.1 Executive Summary... 4 1.2 Goals and Objectives... 5 1.3 Senior Management and Board of Directors Responsibilities... 5 1.4 Business Continuity Planning Processes...

More information

Chapter I: Fundamentals of Business Continuity Management

Chapter I: Fundamentals of Business Continuity Management Chapter I: Fundamentals of Business Continuity Management Objectives Define Business Continuity Management (BCM) Define the relationship between BCM and risk management Review BCM responsibilities Identify

More information

Business Continuity and Disaster Recovery Planning

Business Continuity and Disaster Recovery Planning Business Continuity and Disaster Recovery Planning Jennifer Brandt, CISA A p r i l 16, 2015 HISTORY OF STINNETT & ASSOCIATES Stinnett & Associates (Stinnett) is a professional advisory firm offering services

More information

IT Disaster Recovery and Business Resumption Planning Standards

IT Disaster Recovery and Business Resumption Planning Standards Information Technology Disaster Recovery and Business IT Disaster Recovery and Business Adopted by the Information Services Board (ISB) on May 28, 1992 Policy No: Also see: 500-P1, 502-G1 Supersedes No:

More information

Balancing and Settlement Code BSC PROCEDURE BSCP537. QUALIFICATION PROCESS FOR SVA PARTIES, SVA PARTY AGENTS AND CVA MOAs

Balancing and Settlement Code BSC PROCEDURE BSCP537. QUALIFICATION PROCESS FOR SVA PARTIES, SVA PARTY AGENTS AND CVA MOAs Balancing and Settlement Code BSC PROCEDURE BSCP537 QUALIFICATION PROCESS FOR SVA PARTIES, SVA PARTY AGENTS AND CVA MOAs APPENDIX 3 GUIDANCE NOTES ON COMPLETING THE SAD Version 2.0 Date: 10 September 2007

More information

GUIDELINE ON RISK MANAGEMENT AND INTERNAL CONTROL PRINCIPLES AS WELL AS INTERNAL AUDIT FUNCTION OF INVESTMENT FIRMS

GUIDELINE ON RISK MANAGEMENT AND INTERNAL CONTROL PRINCIPLES AS WELL AS INTERNAL AUDIT FUNCTION OF INVESTMENT FIRMS until further notice 1 (10) Applicable to investment firms GUIDELINE ON RISK MANAGEMENT AND INTERNAL CONTROL PRINCIPLES AS WELL AS INTERNAL AUDIT FUNCTION OF INVESTMENT FIRMS By virtue of section 4, point

More information

NexTrend Securities, Inc. Business Continuity Plan (BCP)

NexTrend Securities, Inc. Business Continuity Plan (BCP) NexTrend Securities, Inc. Business Continuity Plan (BCP) I. Emergency Contact NexTrend Securities, Inc. (the firm ) emergency contact person: Name: Mark Cherlin Position: Executive Representative and Registered

More information

Continuity of Operations Plan Template

Continuity of Operations Plan Template Continuity of Operations Plan Template Office of Water (4608-T) EPA 817-B-14-007 November 2014 Please note: The golden key sticky notes located throughout the template provide additional information and

More information

Supervisory Policy Manual

Supervisory Policy Manual This module should be read in conjunction with the Introduction and with the Glossary, which contains an explanation of abbreviations and other terms used in this Manual. If reading on-line, click on blue

More information

BUSINESS CONTINUITY FRAMEWORK

BUSINESS CONTINUITY FRAMEWORK BUSINESS CONTINUITY FRAMEWORK DOCUMENT INFORMATION DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Strategic document Approved Manager Organisational

More information

Advisory Guidelines of the Financial Supervision Authority. Requirements for Organising the Business Continuity Process of Supervised Entities

Advisory Guidelines of the Financial Supervision Authority. Requirements for Organising the Business Continuity Process of Supervised Entities Advisory Guidelines of the Financial Supervision Authority Requirements for Organising the Business Continuity Process of Supervised Entities These advisory guidelines were established by Resolution No

More information

MEDIA RELEASE. IOSCO reports on business continuity plans for trading venues and intermediaries

MEDIA RELEASE. IOSCO reports on business continuity plans for trading venues and intermediaries IOSCO/MR/54/2015 Madrid, 22 December 2015 IOSCO reports on business continuity plans for trading venues and intermediaries The Board of the (IOSCO) today published two reports that seek to enhance the

More information

Disaster Recovery. Hendry Taylor Tayori Limited

Disaster Recovery. Hendry Taylor Tayori Limited Disaster Recovery Hendry Taylor Tayori Limited Agenda What is Business Continuity planning (BCP) What is Disaster Recovery (DR) and Disaster Recovery Planning (DRP) Overview Lifecycle Analysis Plan design

More information

DRAFT BUSINESS CONTINUITY MANAGEMENT POLICY

DRAFT BUSINESS CONTINUITY MANAGEMENT POLICY DRAFT BUSINESS CONTINUITY MANAGEMENT POLICY This document outlines a set of policies and procedures for formalising a Business Continuity programme, and provides guidelines for developing, maintaining

More information

OUTSOURCING GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS, 2008

OUTSOURCING GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS, 2008 OUTSOURCING GUIDELINES FOR BANKS AND FINANCIAL INSTITUTIONS, 2008 BANK OF TANZANIA PART I PRELIMINARY 1 These guidelines may be cited as the Outsourcing Guidelines for Banks and Financial Institutions,

More information

B U S I N E S S C O N T I N U I T Y P L A N

B U S I N E S S C O N T I N U I T Y P L A N B U S I N E S S C O N T I N U I T Y P L A N 1 Last Review / Update: December 9, 2015 Table of Contents Purpose...3 Background...3 Books and Records Back-up and Recovery...4 Mission Critical Systems...

More information

Business Continuity Planning 101. +1 610 768-4120 (800) 634-2016 www.strohlsystems.com info@strohlsystems.com

Business Continuity Planning 101. +1 610 768-4120 (800) 634-2016 www.strohlsystems.com info@strohlsystems.com Business Continuity Planning 101 Presentation Overview What is business continuity planning Plan Development Plan Testing Plan Maintenance Future advancements in BCP Question & Answer What is a Disaster?

More information

Risk Management of Outsourced Technology Services. November 28, 2000

Risk Management of Outsourced Technology Services. November 28, 2000 Risk Management of Outsourced Technology Services November 28, 2000 Purpose and Background This statement focuses on the risk management process of identifying, measuring, monitoring, and controlling the

More information

MHA Consulting. Business Continuity Management 101

MHA Consulting. Business Continuity Management 101 0 MHA Consulting Business Continuity Management 101 Presented by: Michael Herrera Brandon Magestro MHA Consulting Agenda MHA Consulting Introduction Business Continuity Management (BCM) Defined 2013 Trends

More information

Business Continuity (Policy & Procedure)

Business Continuity (Policy & Procedure) Business Continuity (Policy & Procedure) Publication Scheme Y/N Can be published on Force Website Department of Origin Force Operations Policy Holder Ch Supt Head of Force Ops Author Business Continuity

More information

D2-02_01 Disaster Recovery in the modern EPU

D2-02_01 Disaster Recovery in the modern EPU CONSEIL INTERNATIONAL DES GRANDS RESEAUX ELECTRIQUES INTERNATIONAL COUNCIL ON LARGE ELECTRIC SYSTEMS http:d2cigre.org STUDY COMMITTEE D2 INFORMATION SYSTEMS AND TELECOMMUNICATION 2015 Colloquium October

More information

Guidelines for Financial Institutions Outsourcing of Business Activities, Functions, and Processes Date: July 2004

Guidelines for Financial Institutions Outsourcing of Business Activities, Functions, and Processes Date: July 2004 Guidelines for Financial Institutions Outsourcing of Business Activities, Functions, and Processes Date: July 2004 1. INTRODUCTION Financial institutions outsource business activities, functions and processes

More information

GUIDELINES FOR THE MANAGEMENT OF OPERATIONAL RISK

GUIDELINES FOR THE MANAGEMENT OF OPERATIONAL RISK SUPERVISORY AND REGULATORY GUIDELINES: PU-0412 Operational Risk 25 th November, 2013 GUIDELINES FOR THE MANAGEMENT OF OPERATIONAL RISK 1. INTRODUCTION 1.1. The Central Bank of The Bahamas ( the Central

More information

BUSINESS CONTINUITY PLAN (BCP) Version 2.1 - Revised 10/2013

BUSINESS CONTINUITY PLAN (BCP) Version 2.1 - Revised 10/2013 EMERGENCY CONTACT PERSONS BUSINESS CONTINUITY PLAN (BCP) Version 2.1 - Revised 10/2013 Panoptic Fund Administration, LLC ( Panoptic or the Firm ) has designated two emergency contact persons. Such persons

More information

Business Unit CONTINGENCY PLAN

Business Unit CONTINGENCY PLAN Contingency Plan Template Business Unit CONTINGENCY PLAN Version 1.0 (Date submitted) Submitted By: Business Unit Date Version 1.0 Page 1 1 Plan Review and Updates... 3 2 Introduction... 3 2.1 Purpose...

More information

Ohio Supercomputer Center

Ohio Supercomputer Center Ohio Supercomputer Center IT Business Continuity Planning No: Effective: OSC-13 06/02/2009 Issued By: Kevin Wohlever Director of Supercomputer Operations Published By: Ohio Supercomputer Center Original

More information

Business continuity plan

Business continuity plan Business continuity plan CONTENTS INTRODUCTION 2 - Scope - Components BUSINESS IMPACT ANALYSIS 3 - Business Affairs - Information Technology RISK ASSESSMENT 5 - Broad Categories of Hazards - Hazard Table

More information

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015

Business Continuity Management Governance. Frank Higgins Abu Dhabi March 2015 Business Continuity Management Governance Frank Higgins Abu Dhabi March 2015 Different Names Same Concept BCM (Business Continuity Management) BSI 25999 IPOCM (Incident Preparedness & Operational Continuity

More information

Business Continuity Plan (BCP)

Business Continuity Plan (BCP) Business Continuity Plan (BCP) Conference on Emergency Preparedness for the First Nations of Quebec Hôtel Classique, Quebec September 13-15, 011 Summary 1. The Business Continuity Plan (BCP) and its utility

More information

By: Tracy Hall. Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level. June 9, 2015

By: Tracy Hall. Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level. June 9, 2015 Community Bank Auditors Group Taking Your Business Continuity Plan To The Next Level June 9, 2015 By: Tracy Hall MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company,

More information

Temple university. Auditing a business continuity management BCM. November, 2015

Temple university. Auditing a business continuity management BCM. November, 2015 Temple university Auditing a business continuity management BCM November, 2015 Auditing BCM Agenda 1. Introduction 2. Definitions 3. Standards 4. BCM key elements IT Governance class - IT audit program

More information

Principles for BCM requirements for the Dutch financial sector and its providers.

Principles for BCM requirements for the Dutch financial sector and its providers. Principles for BCM requirements for the Dutch financial sector and its providers. Platform Business Continuity Vitale Infrastructuur Financiële sector (BC VIF) Werkgroep BCM requirements 21 September 2011

More information

BCP and DR. P K Patel AGM, MoF

BCP and DR. P K Patel AGM, MoF BCP and DR P K Patel AGM, MoF Key difference between BS 25999 and ISO 22301 ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics aligning BC to top management

More information

Business Continuity Management

Business Continuity Management Prudential Standard CPS 232 Business Continuity Management Objective and key requirements of this Prudential Standard This Prudential Standard requires each APRA-regulated institution to implement a whole-of-business

More information

PRINCIPLES ON OUTSOURCING OF FINANCIAL SERVICES FOR MARKET INTERMEDIARIES

PRINCIPLES ON OUTSOURCING OF FINANCIAL SERVICES FOR MARKET INTERMEDIARIES PRINCIPLES ON OUTSOURCING OF FINANCIAL SERVICES FOR MARKET INTERMEDIARIES A CONSULTATION REPORT OF THE INTERNATIONAL ORGANIZATION OF SECURITIES COMMISSIONS STANDING COMMITTEE 3 ON MARKET INTERMEDIARIES

More information

MBS Capital Markets, LLC Business Continuity Plan (BCP)

MBS Capital Markets, LLC Business Continuity Plan (BCP) MBS Capital Markets, LLC Business Continuity Plan (BCP) I. Emergency Contact Persons Our firm s two emergency contact persons are: Edwin M. Bulleit, (813) 805-9664, ebulleit@mbscapitalmarkets.com and Kevin

More information

Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Three

Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Three Joint Universities Computer Centre Limited ( JUCC ) Information Security Awareness Training- Session Three Information Security- Perspective for Management Business Impact Analysis ( BIA ) and Business

More information

BUSINESS CONTINUITY PLAN OVERVIEW

BUSINESS CONTINUITY PLAN OVERVIEW BUSINESS CONTINUITY PLAN OVERVIEW INTRODUCTION The purpose of this document is to provide Loomis customers with an overview of the company s Business Continuity Plan (BCP). Because of the specific and

More information

Business Continuity Plan Summary

Business Continuity Plan Summary \ Business Continuity Plan Summary Emergency Contact Persons: Our firm's two emergency contact persons are Travis Hudak, owner (801-550-0387), e-mail: thudak@investlpg.com and Michael Child, owner (801-518-

More information

THORNBURG INVESTMENT MANAGEMENT THORNBURG INVESTMENT TRUST. Business Continuity Plan

THORNBURG INVESTMENT MANAGEMENT THORNBURG INVESTMENT TRUST. Business Continuity Plan THORNBURG INVESTMENT MANAGEMENT THORNBURG INVESTMENT TRUST Business Continuity Plan June 2012 Purpose The purpose of this Business Continuity Plan ( BCP ) is to define the strategies and the plans which

More information

PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-3 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

MARQUIS DISASTER RECOVERY PLAN (DRP)

MARQUIS DISASTER RECOVERY PLAN (DRP) MARQUIS DISASTER RECOVERY PLAN (DRP) Disaster Recovery is an ongoing process to plan, develop, test and implement changes, processes and procedures supporting the recovery of the critical functions in

More information

Business Continuity Planning for Schools, Departments & Support Units

Business Continuity Planning for Schools, Departments & Support Units Business Continuity Planning for Schools, Departments & Support Units 1 What is Business Continuity Planning? Examples Planning for an adverse, major or catastrophic event that would cause a disruption

More information

GUIDELINES FOR BUSINESS CONTINUITY IN WHOLESALE MARKETS AND SUPPORT SYSTEMS MARKET SUPERVISION OFFICE. October 2004

GUIDELINES FOR BUSINESS CONTINUITY IN WHOLESALE MARKETS AND SUPPORT SYSTEMS MARKET SUPERVISION OFFICE. October 2004 GUIDELINES FOR BUSINESS CONTINUITY IN WHOLESALE MARKETS AND SUPPORT SYSTEMS MARKET SUPERVISION OFFICE October 2004 1 1. Introduction Guaranteeing the efficiency and correct operation of money and financial

More information

Business Continuity Management (BCM) Policy

Business Continuity Management (BCM) Policy Business Continuity Management (BCM) Policy Reference number: Corporate 042 Title: Business Continuity Management (BCM) Policy Version number: Version 2 Policy Approved by: LLR PCT Cluster Board Date of

More information

TO: Chief Executive Officers of National Banks, Federal Branches and Data-Processing Centers, Department and Division Heads, and Examining Personnel

TO: Chief Executive Officers of National Banks, Federal Branches and Data-Processing Centers, Department and Division Heads, and Examining Personnel AL 2000 12 O OCC ADVISORY LETTER Comptroller of the Currency Administrator of National Banks Subject: Risk Management of Outsourcing Technology Services TO: Chief Executive Officers of National Banks,

More information

--------------------------

-------------------------- Unofficial Translation With courtesy of the Association of International Banks This translation is for the convenience of those unfamiliar with the Thai language. Please refer to the Thai text for the

More information

BUSINESS CONTINUITY AND DISASTER RECOVERY PLAN

BUSINESS CONTINUITY AND DISASTER RECOVERY PLAN BUSINESS CONTINUITY AND DISASTER RECOVERY PLAN Swiss Alpine Wealth Management has developed this Business Continuity and Disaster Recovery Plan (the Plan ) in order to provide guidance regarding the steps

More information

BUSINESS CONTINUITY MANAGEMENT GUIDELINE

BUSINESS CONTINUITY MANAGEMENT GUIDELINE BUSINESS CONTINUITY MANAGEMENT GUIDELINE April 2010 Table of Contents Preamble...3 Introduction...4 Scope...5 Coming into effect and updating...6 1. Continuity and resumption of business...7 2. Sound and

More information

Disaster Management and Business Continuity Plan for Bankers

Disaster Management and Business Continuity Plan for Bankers Introduction Business interruptions can occur anywhere, anytime. Massive hurricanes, tsunamis, power outages, terrorist bombings and more have made recent headlines. It is impossible to predict what may

More information

2015 CEO & Board University Taking Your Business Continuity Plan To The Next Level. Tracy L. Hall, MBCP

2015 CEO & Board University Taking Your Business Continuity Plan To The Next Level. Tracy L. Hall, MBCP 2015 CEO & Board University Taking Your Business Continuity Plan To The Next Level Tracy L. Hall, MBCP MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company, P.C.

More information

Disaster Recovery Plan Checklist

Disaster Recovery Plan Checklist Disaster Recovery Plan Checklist Your guide for setting up or updating a Disaster Recovery Plan for your business. ArcSource Disaster Recovery Plan Checklist 1. Compile Your Internal Contacts Information

More information

NCUA LETTER TO CREDIT UNIONS

NCUA LETTER TO CREDIT UNIONS NCUA LETTER TO CREDIT UNIONS NATIONAL CREDIT UNION ADMINISTRATION 1775 Duke Street, Alexandria, VA 22314 DATE: December 2001 LETTER NO.: 01-CU-21 TO: SUBJ: ENCL: All Federally Insured Credit Unions Disaster

More information

SLOUGH BOROUGH COUNCIL. CONTACT OFFICER: Roger Parkin, Director Customer & Transactional Services (For all enquiries) (01753)

SLOUGH BOROUGH COUNCIL. CONTACT OFFICER: Roger Parkin, Director Customer & Transactional Services (For all enquiries) (01753) SLOUGH BOROUGH COUNCIL REPORT TO: Audit Committee DATE: 10 th November 2011 CONTACT OFFICER: Roger Parkin, Director Customer & Transactional Services (For all enquiries) (01753) 875207 WARD(S): PORTFOLIO:

More information

Disaster Recovery Planning Process

Disaster Recovery Planning Process Disaster Recovery Planning Process By Geoffrey H. Wold Part I of III This is the first of a three-part series that describes the planning process related to disaster recovery. Based on the various considerations

More information

INSURANCE REGULATORY AUTHORITY IRA/PG/ GUIDELINE TO THE INSURANCE INDUSTRY ON THE BUSINESS CONTINUITY MANAGEMENT

INSURANCE REGULATORY AUTHORITY IRA/PG/ GUIDELINE TO THE INSURANCE INDUSTRY ON THE BUSINESS CONTINUITY MANAGEMENT INSURANCE REGULATORY AUTHORITY IRA/PG/ GUIDELINE TO THE INSURANCE INDUSTRY ON THE BUSINESS CONTINUITY MANAGEMENT SEPTEMBER 2014 To Insurance Companies Reinsurance Companies GUIDELINEON BUSINESS CONTINUITY

More information

Staying In Business. A Business Continuity White Paper by. Paul O Brien and Gerard Joyce. LinkResQ Limited

Staying In Business. A Business Continuity White Paper by. Paul O Brien and Gerard Joyce. LinkResQ Limited Staying In Business A Business Continuity White Paper by Paul O Brien and Gerard Joyce LinkResQ Limited Contents: Introduction. 2 What is Business Continuity? 2 Loss Events = Opportunities for Disaster..

More information

Company Management System. Business Continuity in SIA

Company Management System. Business Continuity in SIA Company Management System Business Continuity in SIA Document code: Classification: Company Project/Service Year Document No. Version Public INDEX 1. INTRODUCTION... 3 2. SIA S BUSINESS CONTINUITY MANAGEMENT

More information

DISASTER RECOVERY PLANNING FOR CITY COMPUTER FACILITIES

DISASTER RECOVERY PLANNING FOR CITY COMPUTER FACILITIES APPENDIX 1 DISASTER RECOVERY PLANNING FOR CITY COMPUTER FACILITIES March 2008 Auditor General s Office Jeffrey Griffiths, C.A., C.F.E. Auditor General City of Toronto TABLE OF CONTENTS EXECUTIVE SUMMARY...1

More information

RISK FACTORS AND RISK MANAGEMENT

RISK FACTORS AND RISK MANAGEMENT Bangkok Bank Public Company Limited 044 RISK FACTORS AND RISK MANAGEMENT Bangkok Bank recognizes that effective risk management is fundamental to good banking practice. Accordingly, the Bank has established

More information

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning FEBRUARY 2015 IT EXAMINATION H ANDBOOK

Federal Financial Institutions Examination Council FFIEC BCP. Business Continuity Planning FEBRUARY 2015 IT EXAMINATION H ANDBOOK Federal Financial Institutions Examination Council FFIEC Business Continuity Planning BCP FEBRUARY 2015 IT EXAMINATION H ANDBOOK Table of Contents Introduction 1 Board and Senior Management Responsibilities

More information

The PNC Financial Services Group, Inc. Business Continuity Program

The PNC Financial Services Group, Inc. Business Continuity Program The PNC Financial Services Group, Inc. Business Continuity Program subsidiaries) 1 Content Overview A. Introduction Page 3 B. Governance Model Page 4 C. Program Components Page 4 Business Impact Analysis

More information

Domain 3 Business Continuity and Disaster Recovery Planning

Domain 3 Business Continuity and Disaster Recovery Planning Domain 3 Business Continuity and Disaster Recovery Planning Steps (ISC) 2 steps [Har10] Project initiation Business Impact Analysis (BIA) Recovery strategy Plan design and development Implementation Testing

More information

(UNOFFICIAL TRANSLATION)

(UNOFFICIAL TRANSLATION) (UNOFFICIAL TRANSLATION) Readers should be aware that only the original Thai text has legal force and that this English translation is strictly for reference. The SEC, Thailand cannot undertake any responsibility

More information

Risk Management Guidelines

Risk Management Guidelines Business Continuity Management Understanding Risk We live in an unpredictable world. No matter how effectively a business protects itself through insurance, there are some risks that cannot be anticipated,

More information

SAMPLE IT CONTINGENCY PLAN FORMAT

SAMPLE IT CONTINGENCY PLAN FORMAT SAMPLE IT CONTINGENCY PLAN FORMAT This sample format provides a template for preparing an information technology (IT) contingency plan. The template is intended to be used as a guide, and the Contingency

More information

Business Continuity System for the KDPW Group

Business Continuity System for the KDPW Group Business Continuity System for the KDPW Group Master Document BCS Policy (abstract) Warsaw, 21 June 2013 Contents 1. Introduction... 3 2. BCS general principles... 3 2.1. Applicability... 3 2.2. Processes...

More information

Final Draft Guidelines

Final Draft Guidelines EBA/GL/2015/06 20 May 2015 Final Draft Guidelines on the minimum list of services or facilities that are necessary to enable a recipient to operate a business transferred to it under Article 65(5) of Directive

More information

GUIDANCE NOTE ON OUTSOURCING

GUIDANCE NOTE ON OUTSOURCING GN 14 GUIDANCE NOTE ON OUTSOURCING Office of the Commissioner of Insurance Contents Page I. Introduction.. 1 II. Application...... 1 III. Interpretation.... 2 IV. Legal and Regulatory Obligations... 3

More information