Laserfiche WebLink
J <br />a <br />z <br />w <br />cv <br />w <br />0 <br />V <br />a <br />a <br />.e <br />■ Travel Risk (e.g. the threat posed to travelers and expatriates by political violence <br />(including terrorism, insurgency, politically motivated unrest and war), social unrest <br />(including sectarian, communal and ethnic violence) as well as violent and petty <br />crime. <br />J.P. Morgan uses a formal Business Impact Analysis (BIA) process and a standard tool to gather <br />and analyze data with each business unit. For consistency of process and content, a Business <br />Resiliency Manager works with the business unit staff to conduct this assessment. The BIA <br />measures the potential impact of disruption to clients, as well as legal, regulatory and <br />financial impact to the Firm if the business process is not able to function. The business unit <br />then establishes a recovery time objective for processes and supporting infrastructure. The <br />recovery time objective range begins with intraday recovery (either 2 hours or 4 hours) and <br />extends out based on the criticality and time- sensitivity of the process (either 24, 48, 72 or <br />73+ hours). Our BIA process is conducted and completed annually on the nearly 3,000 business <br />processes managed by J.P. Morgan. <br />Output from the BIA is used to define and develop a preferred recovery strategy consistent <br />with the specified recovery time objective. Standardized methodologies, templates and tools <br />provide consistent reporting mechanisms, helping to ensure that the selected strategy and the <br />detailed plan address all relevant aspects of our Corporate policies and line of business <br />guidelines. All business resiliency plans are required to incorporate and satisfy specific <br />critical elements, including: <br />• Recovery Strategy • Employee Call Tree • Customers /Third Parties <br />• Recovery Time Objective • Damage Assessment Equipment/ Software <br />• Emergency Notification Recovery Procedures • Telecommunications <br />Work -in- process Assessment <br />Risk assessment and recovery site selection includes evaluation of sites that will not likely be <br />impacted by the same event considering regional geography and critical infrastructure that <br />supports the process. In many cases, alternate J.P. Morgan locations or sister sites are the <br />primary recovery site. Select business units have established hot site locations for business and <br />technology recovery while others have contracts with third party vendors to provide and <br />support business and systems recovery. <br />Where applicable, business resiliency plans reference command centers, assembly sites, <br />offsite storage and recovery sites. A formal process to document and approve recovery sites is <br />in place to help avoid the potential double - booking or business unit overlap at recovery sites. <br />Additionally, support groups, such as Real Estate and Desktop Support, ensure recovery sites <br />can be utilized effectively at the time of an interruption and that plans are established to <br />provide required infrastructure within allowable timeframes. <br />Enhancements to J.P. Morgan business resiliency plans are on- going. Specifically, J.P. Morgan <br />continues to increase operational resiliency through greater use of production location <br />diversification. Technology improvements have been implemented within our world -class data <br />centers further improving the resiliency and robustness of our technology environment. <br />J.1 Mor an <br />55E -281 <br />