Entire section Custom print Link Text Only Rich Text Print

CRA-6.5.5

Licensees must establish and maintain a written business continuity and disaster recovery plan reasonably designed to ensure the availability and functionality of the Licensee's services in the event of an emergency or other disruption to the Licensee's normal business activities. The business continuity and disaster recovery plan, at minimum, must:

(a) Identify documents, data, facilities, infrastructure, personnel, and competencies essential to the continued operations of the Licensee's business;
(b) Identify the supervisory personnel responsible for implementing each aspect of the business continuity and disaster recovery plan; include a plan to communicate with essential Persons in the event of an emergency or other disruption to the operations of the Licensee, including employees, counterparties, regulatory authorities, data and communication providers, disaster recovery specialists, and any other Persons essential to the recovery of documentation and data and the resumption of operations;
(c) Include procedures for the maintenance of back-up facilities, systems, and infrastructure as well as alternative staffing and other resources to enable the timely recovery of data and documentation and to resume operations as soon as reasonably possible following a disruption to normal business activities;
(d) Include procedures for the back-up or copying, with sufficient frequency, of documents and data essential to the operations of the Licensee and storing of the information off site; and
(e) Identify third parties that are necessary to the continued operations of the Licensee's business.
Amended: April 2023
Added: April 2019