55A - RESO - DEPOSITORY SRVS - Laserfiche WebLink

Home Browse Search

CON r|oEmi|xL Plan, Development J.P. Morgan uses a formal Business Impact Analysis (BIA) process and a standard tool, to gather and analyze data with each business unit. For consistency of process and content, a Business Resiliency Ana�yxt works with the business unit staff tn conduct. this assessment. The 0A rneasuf es the potential impact of diSrUption to clients, as weR as legal, regUlatoryand financial impact ho the firmif the business process is not able tofuncdno. The business unit then establishes a recovery window for processes and supporting nif rastructure. I he recovery window range begins with intraday recovery and extends out based on the criticality and time- sensitivity uftheprocess, Output frorn the BIA is used to define and develop a preferred recovery strategy corrsistort with the specified recovery .vindn.v, Standardized methodologies, templates and tools provide consistent reporting mechanisms, helping to ensure that the selected strategy and the detailed plan address aii relevant aspects nf the FME[ guidelines. All business continuity plans ai e required to incorporate arid satisfy specific critical elements, incluchng: o Recovery Strategy ~ Employee Call Tree + Customers/Vendors ° Recovery Time Objective w Damage Assessment * Equipment/Software ^ Emergency Notification * Recovery Procedures * Telecommunications Recovery site setecLioo includes evaluation of sites that wU not likely heimpacted by the same event considering regional geography and critical infrastructure that supports The process. N many cases, alternate J.P, Morgan �ocabnnsor sister sites are the primary recoverycte, Select business units have established hot site locations for business and tochnotogy recovery white others have contracts with third party vendors to piovide and support business and system, recovery, Where applicable, business resiliency plans reference command centers, assembly sites, ofbite storage and recovery sites A formal process to document and approve recovery sites is in place to help avoid the potential dOUble-booking or business unit overlap at recovery sites. Additionally, support groups, such as Real [state and Desktop Support, ensure recovery sites cart be utilized effectively at the time of an interruption and that ti\ans are established to provide required infrastructure within allowable tirrieframe5, Testing, Training and Education All plans must compty with the firms' corporate testing policy and test cycle. Each le5iltivncy plan is tested annually. Exercises can inciude� F), NotificadnnProcedure`(i.e. C^UT/**^):xn unplanned and unannounced exercise ufo documented call tree. sil Walkthrough of Resiliency Plans: An exercise that validates that the resiliency plan incorporates all crihcai processes and identifies gaps or, other weaknesses requiiog remedration, It also familiarizes the business unit or support group staff with the plan and their rote in its execution. Waukthroughs can be combined with I-able Top or full physical tests as part of test preparation. W Table Top Testing� An exercise to validate a Resiliency Plan's assumptions including those related to dependencies, Support grOLIPS', outside. service providers' and vendors' ability to provide support. are sound and known by the other parties. x, FuKPhysica| Testing: An exercise that validates the Plan's ohihtyto recover business units, processes, applications, and infrastructure within the established recovery time uhjecbve without dependency oo the primary site. A-' -_-��~^ �� �� -��