OM-4.3 OM-4.3 Board and Senior Management Responsibilities
Establishment of a Policy, Processes & Responsibilities
OM-4.3.1
A licensee's Board of Directors and Senior Management are collectively responsible for a bank's business continuity. The Board must approve the policies, while senior management must approve procedures and processes for a licensee's BCP.
Added: January 2020OM-4.3.2
Licensees must establish a Crisis Management Team (CMT) to develop, maintain and test their BCP, as well as to respond to and manage the various stages of a crisis. The CMT must comprise members ofsenior management and heads of major support functions (e.g. building facilities, IT, corporate communications and human resources).Added: January 2020OM-4.3.3
Licensees must establish (and document as part of the BCP) individuals' responsibilities in helping prepare for and manage a crisis; and the process by which a disaster is declared and the BCP initiated (and later terminated).Added: January 2020Monitoring and Reporting
OM-4.3.4
The CMT must submit regular reports to the Board and senior management on recovery and response activities in the event of major operational disruptions and also on the results of the testing of the BCP (refer to section OM-4.9). Major changes must be developed by CMT, reported to
senior management , and endorsed by the Board.Added: January 2020OM-4.3.5
The Chief Executive of a licensee must sign a formal annual statement submitted to the Board on whether the response and recovery strategies adopted are still valid and whether the documented BCP is properly tested and maintained. The annual statement must be included in the BCM documentation and will be reviewed as part of the CBB's on-site examinations.
Added: January 2020
