55A - RESO - DEPOSITORY SRVS - Laserfiche WebLink

Home Browse Search

cowr|n ENT |^L Business Resiliency P|aDDiO@ Recovering from ur even avoiding a service disruption, whether a component fnibreorz full- scale disaat*r'depeods^aacvnnprrhenshpandet[ecUvecoutingencyandbu»inr#,wuov*ry planning process combined with experienced people to execute the plan. J,P. Morgan's business/edUencyptxnsmddresso8ya/tso(\hebm^iocoinc(odingemp\oycc:,fadKries, sy*\,n^*,te(ecommunicadnnsandchentz.OurbuoinessresiUeocypinnxaroUvingdoc000eois that are updated on an ongoing basis to incorporate lessons learned and tested regularly to validate the effectiveness and completeness nf the plans. Business Resiliency plans are c(assified as "company confidential" and cannot be disclosed or shared with external entities. For informational purposes, this document provides an overview of the Business Resiliency planning, testing and implementation approach in place for ],P.mnrgan's Treasury EtSecurities Services tine ofbusiness. J. P0\o/ganvsesanintegratedBusinessKcsi|iencystrategy1hat addresses both the disaster recovery and business continuity planning required to resume operations from a disruption and provide for continuing operations over the course of a business interruption tasting up to 30 days, J,P, Morgan's firm-wide Business Resiliency program complies with all applicable guidelines from The U.S, Office of the Comptroller of the Currency (OCC), the U.S. Federal Financial Institutions Examination Council (FF|EC) and the interagency White Paper on Sound Practices to Strengthen the Resilience of the U. S. Financial System. There are approximately 100 guidelines worldwide for resiliency and our Corporate policies and LOB guidelines were documented to account for the various global regulations and are subject to country audits. Recovery strategies and piuns are documented to account for the worst-case scenario, involving loss o( life and widespread geographic interruption, The firm's Treasury 8: Securities Services line of business maintains a dedicated staff responsible for providing Business Resiliency services to at[ business units. The BR professionals provide governance, oversight and compliance functions for business and technology subject matter experts, The team is responsible for ensuring that corporate, regulatory and country- specific requirements are met. Disaster recovery strategies and plans (also known as information technology recovery plans) address the recovery "f critical systems and applications from un interruption t*normal processing cycles. A full range of technical solutions are used, with the specific technologies appiied to each apptication/f unction depending on the criticality and recovery time objective of the specific application. Mainframe data centers use real-time disk mirroring and redundant hardware. Server-based applications can also use disk mirroring, clustering, geographically dispersed systems, and o/bite tape backups, depending un the criticality and recovery window o[ the ^pp|icnbnn(s). Documented business continuity strategies and plans address the recovery uf functions and/or people to one or more viable alternate recovery sites. When similar processes utilizing like systems are performed atmultiple locations, the use ofa sister site o. distributed operating model 1s generally the preferred recovery approach. A sister site is defined asa facility that performs like processes, using sirnaiar systems and equipment, and where local management possesses expertise on the processes to be recovered at that location. In situations where only workspace or access to remote applications is required, other J.P. Morgan locations outside the production site zone are the preferred approach. JYM0ro*an �� ��m�