BCP of Several Bank

8/18/2019 BCP of Several Bank

1/4

BCP of Bangladesh Bank

Business Continuity and Disaster Recovery Plan

Business Continuity Plan (BCP) is required to cover operational risks and takes into account

the potential for wide area disasters, Data Center disasters and the recovery plan. The

primary o!ective of BCP is to enale a ank to survive a disaster and to re‐estalish normal

usiness operations. "n order to survive, ank shall assure that critical operations can resume

normal processin# within a reasonale time frame. The contin#ency plan shall cover the

usiness resumption plannin# and disaster recovery plannin#. BCP shall also address the

ackup, recovery and restore process. $eepin# this into consideration, this chapter covers

Business Continuity Plan (BCP), Disaster %ecovery Plan (D%P) for centrali&ed operation

and Backup and %estore Plan (B%P) for distriuted operation.7.1 Business Continuity Plan (BCP)

7.1.1 Bank must have a Business Continuity Plan addressin# the recovery of disaster to

continue its operation.

7.1.2 Documents related to BCP must e kept in a secured off ‐site location. 'ne copy shall

e stored in the office for ready reference.

7.1.3 BCP shall address the followin#s

a) ction plan to restore usiness operations within the required time frame

i) durin# office hour*s disaster,

ii) outside office hour*s disaster, and

iii) immediate and lon# term plan.

) +mer#ency contacts, addresses and phone numers includin# venders

c) ra list of items such as ackup tapes, laptops, flash drives etc.

d) Disaster recovery site map

7.1. BCP must e tested and reviewed re#ularly to ensure the effectiveness.

7.2 Disaster Recovery Plan (DRP)

7.2.1 Disaster %ecovery -ite (D%-) must e in place replicatin# the Data Center

(Production -ite).

7.2.2 D% site must e at a minimum of / kilometers (radius) of distance from the

0production1 site.


2/4

7.2.3 D% site shall e equipped with compatile hardware and telecommunication

equipment1s to support the critical services of the usiness operation in the event of a

disaster.

7.2. Physical and environmental security of the D% site shall e maintained.

7.2.! "nformation security shall e maintained properly throu#hout the recovery process.

7.2." n up‐to‐date and tested copy of the D% plan shall e securely held offsite. D% plan

shall e2ist for all the critical services where D% requirement is approved y the usiness.

7.2.7 D% test shall e carried out successfully at least once a year.

7.2.# D% test documentation shall include at a minimum

a) -cope, ) Plan, and c) Test %esult.

7.3 Backu$ and Restore Plan (BRP)

7.3.1 There shall e a documented ackup procedure.

7.3.2 Bank shall ensure the safety and security of the ackup copies of information from not

ein# dama#ed y natural calamities and theft (if possile to e sent at off ‐site location).

7.3.3 t least one copy of ackup shall e kept on‐site for the time critical delivery.

7.3. The ackup shall e done periodically considerin# the cycle of

a) 3eekly, ) 4onthly, c) 5early or as required y re#ulatory authority.

7.3.! The ackup lo# sheet shall e maintained, checked 6 si#ned y supervisor.

7.3." The ackup inventory shall e maintained, checked 6 si#ned y supervisor.7.3.7 The aility to restore from ackup media shall e tested at least quarterly.

7.3.# Backup media must e laeled (soft7hard format) properly indicatin# contents, date

etc.


3/4

BCP of %sla&i Bank Bangladesh 'i&ited

3.# BCP lo Chart

8i#ure n "deal Disaster %ecovery 8lowchart

3.* BCP +$date ,anage&ent

The BCP is not a static document, it will chan#e and evolve over time to reflect "T

infrastructure.

BCP update mana#ement is the process that is utili&ed to document Plan maintenance. Plan

maintenance is the on#oin# activity that must occur to keep the BCP current and e2ecutale.

3.1- BC, raining

BC4T memers are the key personnel to identify the e2act prolem and provide correct

solution immediately when any disaster occurs. BC4 trainin# is an on#oin# process.

Current mana#ement and staff, alon# with new hires, must e kept up to date. ll staffs must


4/4

have up9todate trainin# to fulfill their responsiility towards support at recovery process.

"BB: always emphasis proper trainin# for oth local and forei#n as required.

3.11 BCP esting and R/D

Based on the trainin#, BC4T memers will e instructed to apply testin# methodolo#y and

schedules to prepare BCP tests alon# with post9testin# plan and modification procedures.

ll usiness shall e tested at least once in a year y BC4T.