2.9.3—Disaster Recovery Testing
>Control Description
To promote learning, continuous improvement and technology resilience, FRFIs should regularly validate and report on their disaster recovery strategies, plans and/or capabilities against severe but plausible scenarios. These scenarios should be forward-looking and consider, where appropriate:
New and emerging risks or threats;
Material changes to business objectives or technologies;
Situations that can lead to prolonged outage; and,
Previous incident history and known technology complexities or weaknesses.
FRFIs' disaster recovery scenarios should test:
The FRFI's backup and recovery capabilities and processes to validate resiliency strategies, plans and actions, and confirm the organization's ability to meet pre-defined requirements; and,
Critical third-party technologies and integration points with upstream and downstream dependencies, including both on- and off-premises technology.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.