Business Continuity Management
The Bank has Business Continuity Planning (BCP) and Disaster Recovery (DR) protocols to ensure operational resilience in the event of a disruption. The key elements are:
- Business Continuity Plans (BCPs) and Tests:The identified departments are required to prepare their BCPs, which are tested periodically to check preparedness and their capability to carry out activities from an alternate location in the event of a disaster. The departments are identified based on the criticality of the activities in accordance with standard operating procedures. The BCP tests also include peak volume and unannounced tests.
- Disaster Recovery (DR) Drills:To ensure uninterrupted functioning of technology, identified IT systems are required to carry out DR drills at periodic intervals. The learnings from DR drills are reviewed internally to mitigate any identified risks.
- Emergency Response Procedures (ERPs):The Bank is committed to safeguarding the interests of its customers, employees and stakeholders in the event of a disaster or a significant disruption that may affect its operations, technology or premises. As disruptions can happen at any time, the Bank has developed ERPs for mitigating the risk of injuries to customers and employees, and potential damage to the Bank's assets in the event of emergencies such as fire incidents, waterlogging/flood, earthquakes, and possible hold-up situations.
- Assessment of Impact of Natural Disasters:During fiscal 2025, the Bank, in consultation with an external agency, carried out an assessment of the impact of the simultaneous occurrence of extreme natural disasters at key primary and alternate locations. The assessment included estimation of the probability of two paired locations going down simultaneously due to natural disasters like floods, cyclone, earthquake based on data from the past 100 years. The key primary and alternate locations were identified in accordance with the nature of activities that can have a significant impact on the Bank’s critical operations from the customers’ perspective. Based on the assessment, it was concluded that the probabilities of simultaneous impact were not significant.
