SCOPE: BUSINESS CONTINUITY PLAN
Business Continuity Plan and Pandemic Response
The following outline represents the Contents of the Business Continuity Plan (“Plan”The Plan consists of sections, tables, forms, checklists, appendices, and extensive guidance regarding business continuity requirements and pandemic response initiatives.
Subject Matter Expert
The Client works collaboratively with a Subject Matter Expert who assists in understanding the Plan. This “walk-through approach ensures that the Plan reflects the business model and procedures of the Client’s financial institution.
Collaborative Support
Written and verbal (i.e., emails, telephone calls, secure extranet) communication between LCG and the Client on compliance administration matters relating to the Scope, including, but not be limited to, explanations of documents provided, and clarifications of interpretations.
Outline of Contents
- INTRODUCTION OF PLAN
- Objectives
- Plan Scope
- Authorization
- Responsibility
- Corporate Headquarters & Data Process Locations
- Critical Business Departments
- CRISIS MANAGEMENT PROCESS
- Crisis Definition and Reaction
- Crisis Scenario
- Crisis Management Command Structure and Process Activation
- PANDEMIC AND EPIDEMIC RESPONSE
- Actionable Items (Departments and Functions)
- Banking Department and Governmental Inquiries
- Remote Employees during Pandemic
- Preparing for the Second Wave
- DEPARTMENT RESPONSE PLAN
- Information Technology Shared Services
- Business Unit Supports
- Accounting Department
- Product Development
- Quality Assurance
- BUSINESS IMPACT OUTLINE
- Impact Scope
- Objectives
- Critical Time Frame
- System Impact Statements
- Business Impact Analysis Results
- Systems Importance
- BACKUP STRATEGY
- Site Strategy
- Data Capture and Back-ups
- System Viability Analytics
- Departmental File Servers, Desktops, and Laptops
- Data at Outsourced Sites
- RECOVERY STRATEGY
- Approach
- Escalation Plans
- Decision Points (Plan 1, Plan 2, Plan 3)
- TECHNICAL ENVIRONMENT
- Disaster Recovery Solution Overview
- Data Protection
- Redundant Storage
- Data Replication
- Tape Backup and Offsite Storage
- High Availability (Mission Critical Systems)
- DISASTER RECOVERY ORGANIZATION
- Organization Chart for the Crisis Response Team
- Crisis Response Team
- Recovery Team Responsibilities
- Damage Assessment and Salvage
- Physical Security
- Administration
- Infrastructure Recovery Team
- Operations
- DISASTER RECOVERY PROCESS
- Disaster Definition and Reaction
- Process to Activate the Plan
- Steps to follow once the Plan has been activated
- Steps to be taken after the Disaster Condition has Ended
- Maintenance and Testing
- APPENDICES
- Appendix A: Audits and Test Reporting Schedules
- Appendix B: Roles and Responsibilities
- Appendix C: Executive Management
- Appendix D: Crisis Response Team
- Appendix E: Pandemic Response Team
- EMPLOYEE ACKNOWLEDGEMENT STATEMENT