55E - RESO - AGMT - DEPOSITORY SRVS

Home Browse Search

a r z u w 0 u w �Y o_ v H �n Business Resiliency Planning Recovering from or even avoiding a service disruption, whether a component failure or a full - scale disaster, depends on a comprehensive and effective contingency and business resiliency planning process combined with experienced people to execute the plan. J.P. Morgan's business resiliency plans address all parts of the business - including employees, facilities, systems, telecommunications, and third parties. Our business resiliency plans are living documents that are updated on an ongoing basis to incorporate lessons learned and tested regularly to validate the effectiveness and completeness of the plans. Business Resiliency plans, recovery time objectives, test dates and results are classified as "company confidential" and cannot be disclosed or shared with external entities. For informational purposes, this document provides an overview of the Business Resiliency planning, testing and implementation approach in place for J.P. Morgan's Corporate & Investment Bank line of business. J.P. Morgan uses an integrated Business Resiliency strategy that addresses both the technology recovery (IT Resiliency) and business continuity planning (Business Resiliency) required to resume operations from a disruption and provide for continuing operations over the course of a business interruption. J.P. Morgan's Firm -wide Business Resiliency Program is designed to comply with all applicable guidelines from the U.S. Office of the Comptroller of the Currency (OCC), the U.S. Federal Financial Institutions Examination Council (FFIEC) and the Interagency White Paper on Sound Practices to Strengthen the Resilience of the U. S. Financial System. Additionally, there are approximately 100 guidelines worldwide for resiliency. As there is no universally accepted global resiliency regulation, the Firm views the guidelines as requirements to create Firm - wide standards as opposed to adopting a single regulation or standard as the Firm standard. Our corporate policies and line of business guidelines are documented to account for the various global regulations. The Firm's Corporate B Investment Bank line of business business resiliency plans are subject to audits by various regulatory agencies, including the U.S. Federal Reserve, the U.S. OCC, the U.K. Prudential Regulatory Authority and the Financial Conduct Authority, Asia - Pacific monetary authorities and others. Recovery strategies and plans are documented to account for both the typical planning scenario and the worst -case scenario, involving loss of life and widespread geographic interruption. The corporate planning standard requires that the recovery strategies are sustainable for 30 days. J.P. Morgan's Global Business Resiliency group is responsible for leading the Firm -wide Business Resiliency Program. This Program includes corporate governance, awareness and training as well as strategic and tactical initiatives to ensure that risks are identified, assessed, and managed through a cycle of risk assessment, planning, testing and reporting. Program governance utilizes a hierarchy of oversight committees to ensure visibility of the Firm's resiliency capabilities and requirements. The Business Resiliency Program and related governance structure is ultimately accountable to the Board of Directors of J.P. Morgan and reports into the Board of Directors through its Audit, Operating and Management Committees. The Firm's Corporate It Investment Bank line of business maintains both a dedicated staff responsible for providing Business Resiliency services to all of its sub - business units and a JT organ 55E -279