OM-5.4.8
Business continuity plans must take into account different types of likely or plausible scenarios to which the bank may be vulnerable. In particular, the following specific scenarios must at a minimum, be considered in the BCP:
• Utilities are not available (power, telecommunications);
• Critical buildings are not available or specific facilities are not accessible;
• Software and live data are not available or are corrupted;
• Vendor assistance or (outsourced) service providers are not available;
• Critical documents or records are not available;
• Critical personnel are not available; and
• Significant equipment malfunctions (hardware or telecom).
Amended: October 2012
October 07
October 07