DISASTER RECOVERY RISKS - PowerPoint PPT Presentation

About This Presentation

Title:

DISASTER RECOVERY RISKS

Description:

disaster recovery risks lessons learned – PowerPoint PPT presentation

Number of Views:368

Avg rating:3.0/5.0

Slides: 26

Provided by: lsl68

Learn more at: https://www.thefirma.org

Category:

more less

Transcript and Presenter's Notes

Title: DISASTER RECOVERY RISKS

1
DISASTER RECOVERY RISKS

LESSONS LEARNED

2
DISCLAIMER

The information contained in presentation
represents generic industry information and does
not express the views of Hancock Bank Holding
Company (HBHC) or any of its subsidiaries
HBHC does not give legal advice
Any quotes, narratives or excerpts of information
used with permission

3
Hurricane Katrina

Massive storm YES.
Massive damage to several states YES.
Massive problems for financial institutions
YES.
Massive changes to Disaster Recovery plans YES.
Hurricanes arent the only disasters that can hit
you tornadoes, fires, flooding, and the list
goes on and on natural disasters as well as
threats of terrorism

4
Disaster Recovery Plan

Just because you are in Trust / Wealth Management
/ Investments, do not think that your plan is a
stand alone plan and you will not be affected.
We learned what really is the number one and most
important step that should be in your Disaster
Recovery plan both pre-disaster and after.

5
MOST IMPORTANT STEPS

People
Communication
Location
Access to Essential Functions
Coordination with support areas
Testing

6
C O N T A C T L I S T S

Have in Disaster Plan every type of contact
information that you can gather
Phone numbers for as many people in everyones
family that you can locally away
Ensure that your contact lists in your plan are
always current
Provide this list to all employees, whether
considered key personnel or not
Make sure everyone understands that Disaster
Recovery is a TEAM effort everyone is included
these lists should always be with them or in a
place they can access anytime

7
E M P L O Y E E S

Locate, locate, locate each everyone you can as
fast as you can
Ensure contact is made daily
Ensure everyone is kept in the loop essential
personnel or not
Have a location for your people to gather
Ensure that everyone knows where it is

8
E S S E N T I A L P E R S O N N E L

Ensure that there are back ups for all key
personnel identified in your plan
Ensure that cross training has been completed for
all Critical positions, including Supervisors
as well as in Compliance
Ensure that during testing you include all of
these identified in your plan

9
C O M M U N I C A T I O N

Steps to implement communication immediately
Deployment to another location and a SET time
frame
Vendor 24/7 contacts
Transportation Type, Fuel, Access
Mail service Post Office, UPS, Fed Ex, etc.

10
L O C A T I O N

Assess the personnel you have available to work
IMMEDIATELY implement your compliance disaster
recovery plan
Ask for help from everyone to ensure ALL areas
are monitored policy procedures are followed
DOCUMENT any all exceptions, whatever the
reason

11
C R I T I C A L F U N C T I O N S

Assess what functions you deem most critical to
operate in a disaster situation
Personnel essential to these functions
Location and steps to implement this part of your
plan
Essential equipment, systems, supplies and files
needed for these functions

12
C O O R D I N A T I O N

Other areas within your organization, vendors and
outside suppliers
Contact names, numbers and addresses for all
above
IT coordination whether service bureau or
out-sourced or internal
Coordination of Disaster Recovery Plans
Copies of contracts or at least an except from
contract

13
T E S T I N G

Identify back ups for all key personnel
Cross training completed for all Critical
positions functions
Include everyone identified in your plan
Set dates for testing follow up on all
exceptions
Be included in disaster recovery testing for all
areas within your organization, vendors and
outside suppliers

14
C O M P L I A N C E

Dont lose sight of
Due Diligence, Policy Procedures
Internal Controls, Confidentiality
Reconcilements, Suspense Accounts
Passwords, Dual Custody
Asset Protection, Daily Administrative Duties
Settlements, Investments, Distributions
Your Role on Accounts, Customer Requests
Fiduciary Duty comes First

15
C O M P L I A N C E

Make sure whoever is responsible for Fiduciary
Compliance has a good back up
If not responsible for Disaster Recovery plans,
ensure you are part of the process for Wealth
Management, all areas in your organization as
well as vendors
Network with others in your area
Use resources available anyone you can possibly
think of

16
C O M P L I A N C E

Excerpts from HBHC (used with permission)
FUEL Fuel plan to ensure that the lights and
computers stay on as well as associates have fuel
to get to work - designed to be self-sufficient
for 10-days.
TECHNOLOGY SYSTEMS Mainframe "host" and servers
to include access to Email and VPN into the
system from the Internet.
EMERGENCY NOTIFICATION Alert24 notification
system.
PHONES The (service provider) phones programmed
with a set of pre-determined contact numbers.
Pre-issuance of some of the phones as primary
communication devices for key associates.
KEY OFFICES Identified key offices to support
connectivity to the network that have manual
transfer switches so we can support them
with generator power without disrupting the
(local electric company) power feed.

17
R E S O U R C E S

FFIEC Publication LESSONS LEARNED FROM HURRICANE
KATRINA Preparing Your Institution for a
Catastrophic Event
ABA Task Force Policy on Emergency Preparedness

18
R E S O U R C E S