o  Business Impact Analysis:
§  Identification of critical activities, IT systems, applications, internal and external dependencies
§  Determination of Recovery Time Objective (RTO), Recovery Point Objective (RPO) and minimum resources required for the continuity of critical activities
§  Determination of critical path for implementation of full BCM
o  Risk Assessment
§  Identification of major threat scenarios based on impact and probability in order to derive potential business disruptions
§  BCM Risk Control Self-Assessment (RCSA)
o  Business Recovery Procedures (BRPs) for critical activities bank-wide based on major business disruptions:
§  Loss of access to office premises
§  Loss of critical IT systems and applications
§  Loss of internal dependencies
§  Loss of external dependencies
o  Crisis Management Plan (CMP)
§  Crisis preparedness
§  Incident reporting
§  Crisis management team’s activation
§  Crisis report - Root Cause Analysis (RCA)
o  Disaster Recovery Plan (DRP)
§  Finalization of Recovery Time Objective (RTO) and Recovery Point Objective (RPO) for critical applications
§  Readiness of backup systems, resources and their capacity
o  Testing and Training bank-wide
§  Disaster recovery drills
§  Business recovery drills
§  Evacuation drills
§  Safety and security awareness
§  Evacuation guide
§  Introduction to BCM
o  Secretary of BCM Steering Committee
§  Conduct regular need based meetings
§  Circulation of agenda
§  Finalization of minutes and submission with Management Board
o  Reporting
§  Reporting to Management, Head Quarter and Regulator
v  Others
Maintain the MIS of receive and dispatch tablets.