Business Continuity Planning

Business Continuity Planning

Sources

Federal Financial Institutions Examination Council
Federal Deposit Insurance Corporation
Federal Reserve Board
National Credit Union Administration
Office of the Comptroller of the Currency
Office of Thrift Supervision
External Resources

Federal Financial Institutions Examination Council

Resource Title	Type	Date
FFIEC: Lessons Learned from Hurricane Katrina: Preparing Your Institution for a Catastrophic Event	Guidance	June 2006

Federal Deposit Insurance Corporation

Resource Title	Type	Date
12 CFR Part 364: Interagency Guidelines Establishing Standards for Safety and Soundness, Appendix A	Regulation	N/A
12 CFR Part 364: Interagency Guidelines Establishing Information Security Standards, Appendix B	Regulation	N/A
FIL-6-2008: Interagency Statement on Pandemic Planning	Guidance	February 6, 2008
FIL-25-2006: Influenza Pandemic Preparedness Interagency Advisory	Guidance	March 15, 2006
FIL-84-2002: Interim Sponsorship Policy for Government Emergency Telecommunications Service (GETS) Cards	Guidance	August , 2002
FIL-68-2001: 501(b) Examination Guidance	Guidance	August 24, 2001
FIL-81-2000: Risk Management of Technology Outsourcing	Guidance	November 29, 2000

Federal Reserve Board

Resource Title	Type	Date
12 CFR Part 208: Interagency Guidelines Establishing Standards for Safety and Soundness, Appendix D-1	Regulation	N/A
12 CFR Part 208: Interagency Guidelines Establishing Information Security Standards (State Member Banks), Appendix D-2	Regulation	N/A
SR Letter 07-18: FFIEC Guidance on Pandemic Planning	Guidance	December 12, 2007
SR Letter 06-5: Influenza Pandemic Preparedness	Guidance	March 15, 2006
SR Letter 06-3: Interagency Supervisory Guidance for Institutions Affected by Hurricane Katrina	Guidance	February 3, 2006
SR Letter 05-24: Interagency Questions and Answers for Financial Institutions in Response to Hurricanes Katrina and Rita	Guidance	December 2, 2005
SR Letter 05-17: Katrina Related Marketing Practices Invoking the Name of the Federal Reserve	Guidance	September 22, 2005
SR Letter 05-16: Supervisory Practices Regarding Banking Organizations and Consumers Affected by Hurricane Katrina	Guidance	September 15, 2005

National Credit Union Administration

Resource Title	Type	Date
12 CFR Part 748: Guidelines for Safeguarding Member Information, Appendix A	Regulation	N/A
12 CFR Part 749: Record Preservation Program and Record Retention, Appendix A and B	Regulation	N/A
NCUA Letter to Credit Unions 08-CU-01: Guidance on Pandemic	Guidance	January 2008
NCUA Risk Alert 06-Risk-01: Disaster Planning and Response	Guidance	April 2006
NCUA Letter to Credit Unions 06-CU-06: Influenza Pandemic Preparedness	Guidance	March 2006
NCUA Letter to Credit Unions 02-CU-17: e-Commerce Guide for Credit Unions	Guidance	December 2002
NCUA Letter to Credit Unions 01-CU-21: Disaster Recovery and Business Resumption Contingency Plans	Guidance	December 2001
NCUA Letter to Credit Unions 98-CU-12: Business Resumption Contingency Planning	Guidance	June 1998

Office of the Comptroller of the Currency

Resource Title	Type	Date
12 CFR Part 5.30: Establishment, Acquisition, and Relocation of a Branch	Regulation	N/A
12 CFR Part 30: Guidelines Establishing Standards for Safety and Soundness, Appendix A	Regulation	N/A
12 CFR Part 30: Interagency Guidelines Establishing Information Security Standards, Appendix B	Regulation	N/A
OCC Bulletin 2007-49: Pandemic Planning: Interagency Guidance	Guidance	December 18, 2007
OCC Bulletin 2006-26: Disaster Planning - Hurricane Katrina: Lessons Learned	Guidance	June 15, 2006
OCC Bulletin 2006-12: Influenza Pandemic Preparedness [Interagency]	Guidance	March 5, 2006
OCC Bulletin 2006-6: Community Reinvestment Act: Hurricanes Katrina and Rita	Guidance	February 9, 2006
OCC Bulletin 2005-36 [Interagency]: Statement and Order: Hurricanes Katrina and Rita	Guidance	October 4, 2005
OCC Bulletin 2003-14: Interagency White Paper on Sound Practices to Strengthen the Resilience of the U.S. Financial System	Guidance	April 8, 2003
OCC Bulletin 2002-33: GETS	Guidance	July 23, 2002
OCC Bulletin 98-3: Technology Risk Management	Guidance	February 4, 1998

Office of Thrift Supervision

Resource Title	Type	Date
12 CFR Part 570: Interagency Guidelines Establishing Standards for Safety and Soundness, Appendix A	Regulation	N/A
12 CFR Part 570: Interagency Guidelines Establishing Information Security Standards, Appendix B	Regulation	N/A
PR 07-089: Interagency Statement on Pandemic Planning	Guidance	December 12, 2007
CEO Ltr 239: Hurricane Katrina: Industry Lessons Learned	Guidance	June 15, 2006
CEO Ltr 237: Interagency Advisory on Influenza Pandemic Preparedness	Guidance	March 15, 2006
CEO Ltr 234: Interagency Supervisory Guidance for Institutions Affected by Hurricane Katrina	Guidance	February 3, 2006
CEO Ltr 165: Financial Banking Infrastructure Information Committee (FBIIC) Interim GETS Sponsorship Policy	Guidance	July 26, 2002

External Resources

* Non-regulatory Resources and are provided to assist in your research and continuing professional education. They are not endorsed, certified, or approved by the FFIEC or its member agencies.

Resource Title	Type	Date
The Joint Forum, High-level Principals for Business Continuity (Basel)	Print	August 2006
Pandemic Influenza - Preparedness, Response, and Recovery Guide for Critical Infrastructure and Key Resources (DHS)	Print	June 2006
Statement on Preparations for "Avian Flu" (FSSCC and DHS)	Print	January 2006
Business Pandemic Influenza Planning Checklist (HHS and CDC)	Print	December 2005
National Strategy for Pandemic Influenza (Homeland Security Council)	Print	November 2005
Best Practices to Assure Telecommunications Continuity for Financial Institutions and the Payment and Settlement Utilities: Report by the Assuring Telecommunications Continuity Task Force (FRB New York)	Print	September 2004
The President's National Security Telecommunications Advisory Committee: Financial Services Task Report (NSTAC)	Print	April 2004
Contingency Planning Guide for Information Technology Systems, NIST SP 800-34 (NIST)	Print	June 2002