Business Continuity Planning

Without a central repository of up to date plans, you cannot get back online and restore IT assets, especially during concurrent disasters. With our business continuity management solution, be prepared when disasters occur with standard operating procedures for your recovery processes, a plan generator and a central plan repository. In 2009 FINRA conducted a voluntary firm survey to determine preparedness for a pandemic in light of current events involving influenza A . This survey continues FINRA's efforts to assist firms with business continuity planning by facilitating the exchange of information. In coordination with the SEC and the CFTC, we are conducting a review of the impact of Hurricane Sandy on firms’ operations and their ability to conduct business at a time when business continuity plans were enacted.

Tier 7 - Highly automated, business-integrated solution • Tier 7 solutions include all the major components being used for a Tier 6 solution with the additional integration of automation. This allows a Tier 7 solution to ensure consistency of data above that of which is granted by Tier 6 solutions. Additionally, recovery of the applications esmithit is automated, allowing for restoration of systems and applications much faster and more reliably than would be possible through manual Disaster Recovery procedures. Tier 4 - Point-in-time copies • Tier 4 solutions are used by businesses that require both greater data currency and faster recovery than users of lower tiers.

Although IT might drive the business continuity, it's essential to get buy-in from management and communicate key information to the entire organization. One other important area of collaboration is with the security team -- although the two groups often work separately, an organization can gain a lot by sharing information across these departments. At the very least, everyone should know the basic steps for how the organization plans to respond. At a time when downtime is unacceptable, business continuity is critical.

Join as a corporate partner, and take your organization to the next level. FINRA's Office of General Counsel staff provides broker-dealers, attorneys, registered representatives, investors and other interested parties with interpretative guidance relating to FINRA’s rules. While start and stop times are pre-agreed, the actual duration might be unknown if events are allowed to run their course. United Kingdom and Australia have incorporated resilience into their continuity planning.

Finra Main Navigation

Quantifying of loss ratios must also include "dollars to defend a lawsuit." It has been estimated that a dollar spent in loss prevention can prevent "seven dollars of disaster-related economic loss." Create data collection forms to capture information and define processes for manual handling of the information collected. Establish control logs to document transactions and track their progress through the manual system. The worksheets Operational and Financial Impactsand Business Continuity Resource Requirements should be distributed to business process managers along with instructions about the process and how the information will be used.

Are You Ready To Start Planning Your Risk Management Program?

The BCI has many other free resources available to enhance your understanding of business continuity, see a few below to start ... Business continuity is about having a plan to deal with difficult situations, so your organization can continue to function with as little disruption as possible. In instances when data communications are disrupted, firms are responsible for retaining data until it can be transmitted to FINRA. A firm must address the elements to the extent applicable and necessary. If any of the elements is not applicable, the firm's BCP must document the rationale for not including the element in its plan. If a firm relies on another entity for any one of the elements or any mission critical system, the firm's BCP must address this relationship.

Depending on how often backups are made, they are prepared to accept several days to weeks of data loss, but their backups are secure off-site. Several business continuity standards have been published by various standards bodies to assist in check listing ongoing planning tasks. Telephones are ringing and customer service staff is busy talking with customers and keying orders into the computer system.

After all managers have completed their worksheets, information should be reviewed. Meetings with individual managers should be held to clarify information and obtain missing information. Since all resources cannot be replaced immediately following a loss, managers should estimate the resources that will be needed in the hours, days and weeks following an incident. To retain digital trust, organizations must be transparent in the aftermath of cybersecurity attacks and data breaches. Table 1 lists the standards in the ISO 223XX Series that apply to business continuity and related activities.