2.9.1—Disaster Recovery Planning
>Control Description
FRFIs should develop, implement and maintain an ERDP that sets out their approach to recovering technology services during a disruption. FRFIs should align the disaster recovery program with its business continuity management program. The EDRP should establish:
Accountability and responsibility for the availability and recovery of technology services, including recovery actions;
A process for identifying and analyzing technology services and key dependencies required to operate within the FRFI's risk tolerance;
Plans, procedures and/or capabilities to recover technology services to an acceptable level, within an acceptable timeframe, as defined and prioritized by the FRFI; and,
A policy or standard with controls for data back-up and recovery processes, requirements for data storage and periodic testing.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.