Versions

 

OM-4.4.8

BCPs must take into account different types of likely or plausible scenarios to which the bank may be vulnerable considering both the control (pre-event) measures and response (post-event) measures. In particular, the following specific scenarios must at a minimum, be considered in the BCP:

(a) Utilities are not available (power, telecommunications);
(b) Critical buildings are not available or specific facilities are not accessible;
(c) Software and live data are not available or are corrupted;
(d) Vendor assistance or (outsourced) service providers are not available;
(e) Critical documents or records are not available;
(f) Critical personnel are not available; and
(g) Significant equipment malfunctions (hardware or telecom).
Added: January 2020