{"extra_enabled_CL":"on","extra_comment_beginning_CL":"beginning","extra_comment_CL":"","extra_enabled_OC":"on","extra_comment_beginning_OC":"beginning","extra_comment_OC":"<p><span style=\"text-decoration: underline;\"><strong>Below is BBL Organization Chart<\/strong><\/span><\/p>","extra_comment_beginning_CF":"beginning","extra_comment_CF":"","extra_enabled_RM":"on","extra_comment_beginning_RM":"beginning","extra_comment_RM":"<p><span style=\"text-decoration: underline;\"><strong>Following is BBL Risk Assessment<\/strong><\/span><\/p>","extra_comment_beginning_RM2":"beginning","extra_comment_RM2":"","extra_enabled_BP":"on","extra_comment_beginning_BP":"beginning","extra_comment_BP":"<p>This part of the document lists by Department, the critical business processes each department is responsible to achieve.<\/p>\r\n<p>Each business process is comprised of one or more business functions that represents a key element of current business operations.<\/p>\r\n<p>IT includes the following columns:<\/p>\r\n<p>- RPO (Recovery Point Objectives) :represents the amount of data that can be lost without severely impacting the recovery of operations or the point in time in which systems and data must be recovered (e.g., the date and time of a business disruption).<\/p>\r\n<p>- RTO (Recovery Time Objectives) : represents the maximum allowable downtime that can occur without severely impacting the recovery of operations or the time in which systems, applications, or business functions must be recovered after an outage (e.g. the point in time that a process can no longer be inoperable).<\/p>\r\n<p>- MTO or MTPOD (Maximum Tolerable Outage or Maximum Tolerable Period Of Downtime): represent the duration after which a direction's viability will be irrevocably threatened if a process or asset cannot be resumed (e.g. the time period after the start of disruption and when the activity will be resumed)<\/p>\r\n<p>- Assets impacted by this process (assets dependencies): Asset can be Critical People, Physical Asset, Intangible Asset, Financial, Building<\/p>\r\n<p>- Processes impacted by this process (processes dependencies)<\/p>\r\n<p>- Process Owner: Who is responsible of the process<\/p>\r\n<p>- Impact % on each type of Risk (sum must be 100): Business ,Financial, Human Resource, Legal, Reputation, Technical<\/p>","extra_enabled_BS":"on","extra_comment_beginning_BS":"beginning","extra_comment_BS":"<p>Every Organization defines its critical assets and evaluate the sensitivity of each of them.<\/p>\r\n<p>Assets are classified by Location and by Types: Buildings, physical assets, intangible assets.<\/p>\r\n<p>Critical assets can have recovery assets, which can be used in case the asset was defected, unavailable?<\/p>\r\n<p>Assets are evaluated as per their:<\/p>\r\n<p>- Sensitivity which is derived from availability, Integrity and Confidentiality levels indicated.<\/p>\r\n<p>- % of impact is . The total must be 100%<\/p>\r\n<p>- RTO, RPO and MTO for this asset<\/p>\r\n<p>- Processes impacted by this asset (processes dependencies)<\/p>\r\n<p>- Other assets impacted by this asset (Assets dependencies)<\/p>","extra_comment_beginning_CD":"beginning","extra_comment_CD":"","extra_enabled_TPL":"on","extra_comment_beginning_TPL":"beginning","extra_comment_TPL":"","extra_enabled_NCT":"on","extra_comment_beginning_NCT":"beginning","extra_comment_NCT":"<p>A call tree is a layered hierarchical communication model used to notify specific individuals of an event. A call tree is also known as a phone tree, call list, phone chain or text chain.<\/p>\r\n<p>Several Scenarios for notification are available. DPBRCT Disaster Plan Branches Call Tree DPCDCL Disaster Plan Credit Department Call Tree DPEBSCT Disaster Plan Electronic Business Service Call Tree DPIADC Disaster Plan Internal Audit Department Call Tree DPITDCT Disaster Plan Information Technology Department Call Tree DPOPDCT Disaster Plan Operation Department Call Tree DPTRDCT Disaster Plan Treasury Department Call Tree<\/p>","extra_enabled_KCS":"on","extra_comment_beginning_KCS":"beginning","extra_comment_KCS":"","extra_enabled_BIA":"on","extra_comment_beginning_BIA":"beginning","extra_comment_BIA":"<p>The Business Impact Analysis (BIA) is a process to determine the mission critical business functions and associated critical resource.<\/p>\r\n<p>This will be accomplished by completing the following six components:<\/p>\r\n<p>1. Identifying the business functions<\/p>\r\n<p>2. Identifying all process resources that support the business functions<\/p>\r\n<p>3. Determining the critical point in the business cycle of each process<\/p>\r\n<p>4. Determining if the process is critical to the business<\/p>\r\n<p>5. Estimating the potential impact and recovery timeframes<\/p>\r\n<p>6. Ranking the critical processes To perform this task, departments identified the following types of key sources of information and other resources for their function and the organization overall.<\/p>\r\n<p>The intent is to identify:<\/p>\r\n<p>- The financial impact resulting from the loss of your business function<\/p>\r\n<p>- The non-financial impact due to an outage<\/p>\r\n<p>- Critical points and resources required by your business function<\/p>\r\n<p>- Computer systems applications identification and ranking<\/p>\r\n<p>- Impact resulting from lost transactions\/data<\/p>\r\n<p>- Linkages from other business processes Scenario When filling the BIA, departments?<\/p>\r\n<p>staff considered an interruption scenario as the basis for their response such as:<\/p>\r\n<p>- A major disruption of your normal working area has occurred and it will be inaccessible for at least 7 days.<\/p>\r\n<p>- All business records, equipment, etc. located in your normal working area are unavailable.<\/p>\r\n<p>- Overtime, outside services, employee food, travel and lodging expenses, etc. are authorized to assist in reestablishing essential operations.<\/p>\r\n<p>- Computer systems availability will be significantly reduced. Due to the amount of time and effort needed for restoration of the computer system(s), only a limited number of computer applications will be available starting on the fourth day following the outage.<\/p>\r\n<p>Threats could be related to the following:<\/p>\r\n<p>- Various natural disasters.<\/p>\r\n<p>- Community-wide hazardous events.<\/p>\r\n<p>- Operational accidents or technology failures.<\/p>\r\n<p>- Vendor failure to supply critical equipment, software or services.<\/p>\r\n<p>- Current or alternate sites failures.<\/p>\r\n<p>- Relocation threats. Specific scenarios should include how the bank would respond if:<\/p>\r\n<p>- Critical personnel are not available.<\/p>\r\n<p>- Critical buildings, facilities or geographical regions are not accessible.<\/p>\r\n<p>- Equipment malfunctions (hardware, telecommunications, operational equipment, etc).<\/p>\r\n<p>- Software and data are not accessible or are corrupted.<\/p>\r\n<p>- Vendor assistance or service provider is not available.<\/p>\r\n<p>- Utilities are not available (power, telecommunications, etc).<\/p>\r\n<p>- Critical documentation and\/or records are not available. Terminology Buildings Financial Intangible Assets People Physical Assets Process Sub Process Activity RTO RPO MTO &gt; E A Business Process is a set of tasks and\/or procedures that accept a specific work input and generate a specific work output. Every process is identified by the following components: Process Owner: Who is responsible of the process.<\/p>\r\n<p>This is described in Resource, Function, Manager, Location of process owner ( Site, Building, Floor) Assets impacted by this process (assets dependencies):<\/p>\r\n<p>Asset can be Critical People, Physical Asset, Intangible Asset, Financial, Building Sub Process :<\/p>\r\n<p>which are other Processes impacted by this process (processes dependencies) RPO (Recovery Point Objectives) :<\/p>\r\n<p>Represents the amount of data that can be lost without severely impacting the recovery of operations or the point in time in which systems and data must be recovered (e.g., the date and time of a business disruption).<\/p>\r\n<p>RTO (Recovery Time Objectives) :<\/p>\r\n<p>Represents the maximum allowable downtime that can occur without severely impacting the recovery of operations or the time in which systems, applications, or business functions must be recovered after an outage (e.g. the point in time that a process can no longer be inoperable).<\/p>\r\n<p>MTO or MTPOD (Maximum Tolerable Outage or Maximum Tolerable Period Of Downtime):<\/p>\r\n<p>represent the duration after which a direction's viability will be irrevocably threatened if a process or asset cannot be resumed (e.g. the time period after the start of disruption and when the activity will be resumed)<\/p>","extra_comment_beginning_SRT":"beginning","extra_comment_SRT":"","extra_comment_beginning_SL":"beginning","extra_comment_SL":"","extra_enabled_BPL":"on","extra_comment_beginning_BPL":"end","extra_comment_BPL":"","extra_comment_beginning_AL":"beginning","extra_comment_AL":"","extra_enabled_PRC":"on","extra_comment_beginning_PRC":"beginning","extra_comment_PRC":"","extra_enabled_APP":"on","extra_comment_beginning_APP":"beginning","extra_comment_APP":"<p>ATM Connection ATM Recovery Template BIA Sample CCIS Recovery Template CISCO routers and ASA Recovery Template CISCO switches Recovery Template IBANK Recovery Template Microwave Connection Recovery Template NOD32 - AntiVirus Recovery Template ORACLE - BCC Recovery Template Payroll Recovery Template Shariaa Audit Department - Arabic Template Step to run Equation from DR Site Step to run Swift from DR Site Trade Innovation Recovery Template UPS Recovery Template Webform Recovery Template Staff residing in Aramoun-DR Site BBL BCP Damage Assessment Form BBL BCP Emergency Event Form BBL BCP Emergency Qualification Form BBL BCP Preliminary Damage Assessment Form<\/p>"}