+225. Competent authorities should determine whether the institution’s business continuity …

225. Competent authorities should determine whether the institution’s business continuity …

Competent authorities should determine whether the institution’s business continuity management includes:

  • a. Business Impact Analysis (BIA);
  • b. appropriate recovery strategies incorporating key internal and external dependencies and clearly defined recovery priorities and resilience levels;
  • c. comprehensive and flexible plans to deal with plausible disruptive scenarios, which are established based on the BIA and in coordination with internal and external stakeholders;
  • d. plans that establish contingency strategies and response and recovery procedures;
  • e. effective testing of the design and operational effectiveness of the plans;
  • f. BCM awareness and training programmes;
  • g. communications plans for informing management and all relevant stakeholders, and crisis-management documentation, measures and a crisis management function where applicable (as per Article 11(7) of DORA).

1. Overview

,
Summary Regulation

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements
Source Requirement

3. Related Standards

Standards
Source Requirement
  • EBA - Published by the European Banking Authority at https://www.eba.europa.eu/