OM-5.3 OM-5.3 Board and Senior Management Responsibilities
Establishment of a Policy, Processes&Responsibilities
OM-5.3.1
A Bank's Board of Directors and Senior Management are collectively responsible for a bank's business continuity. The Board must endorse the policies, standards and processes for a licensee's BCP, as established by its senior management. The Board and senior management must delegate adequate resources to develop the BCP, and for its maintenance and periodic testing.
October 07OM-5.3.2
Licensees must establish a Crisis Management Team (CMT) to develop, maintain and test their BCP, as well as to respond to and manage the various stages of a crisis. The CMT must comprise members of
senior management and heads of major support functions (e.g. building facilities, IT, corporate communications and human resources).Amended: July 2011
October 07OM-5.3.3
Licensees must establish (and document as part of the BCP) individuals' responsibilities in helping prepare for and manage a crisis; and the process by which a disaster is declared and the BCP initiated (and later terminated).
October 07Monitoring and Reporting
OM-5.3.4
The CMT must submit regular reports to the Board and senior management on the results of the testing of the BCP (refer to section OM-5.9). Major changes must be developed by CMT, reported to
senior management , and endorsed by the Board.Amended: July 2011
October 07OM-5.3.5
The Chief Executive of a licensee must sign a formal annual statement submitted to the Board on whether the recovery strategies adopted are still valid and whether the documented BCP is properly tested and maintained. The annual statement must be included in the BCP documentation and will be reviewed as part of the CBB's on-site examinations.
October 07
