How do I prepare for an audit of my DR/BCP plan?

If you have either a CPA, NCUA, FDIC, or OTS audit coming up and you would like to review your plan to make sure it will meet the general requirements, this post is for you.

The Basics

  • The basics in preparing for an audit or examination should include:
  • Is there anything from the last report we still need to complete/update?
  • Review industry discussion forums for the latest areas of focus by auditors/examiners.
  • UPDATE the PLAN! Make sure every part of your plan documentation is up to date, especially the BIA.
  • Train staff. They should be aware of your DR/BCP and prepared to demonstrate at least a minimal knowledge and understanding.
  • Test – have written confirmation of your last test and key details of what worked and didn’t work. Have planned actions and remediation steps for the stuff that didn’t work.

The Full Checklist

If you would like a much more detailed checklist based on the FFIEC examination guidelines – here you go!

The goal of the Business Continuity Plan (BCP):

  • Minimize financial losses to the institution
  • Serve customers and financial markets with minimal disruptions
  • Mitigate the negative effects of disruptions on business operations

 

continue reading »