This specification specifies the management requirements of information system disaster recovery for banks.
This specification is applicable to People's Bank of China and banking financial institutions (including foreign-funded banks, hereinafter referred to as "organizations") established within the territory of the People's Republic of China.
Foreword I
Introduction II
1 Scope
2 Normative Reference
3 Terms and Definitions
4 Overview of Information System Disaster Recovery for Banks
4.1 Disaster Recovery Contents
4.2 Periodic Duty for Disaster Recovery
4.3 Inter-organization Cooperation
5 Establishment and Responsibilities of Organizational institution
5.1 Establishment of Organizational institution
5.2 Composition and Responsibilities of Organizational institution
6 Demand Analysis of Disaster Recovery
6.1 Risk Analysis
6.2 Business Impact Analysis
6.3 Determination of Disaster Recovery Demand
7 Establishment of Disaster Recovery Strategy
7.1 Cost Risk Analysis and Strategy Determination
7.2 Disaster Recovery Capability Grade
7.3 Layout of Backup Center for Disaster Recovery
7.4 Acquisition and Guarantee of Resource and Service
8 Construction of Backup Center for Disaster Recovery
8.1 Infrastructure Construction
8.2 Construction of Backup System for Disaster Recovery
8.3 Project Supervision
9 Operating Maintenance Management of Backup Center for Disaster Recovery
9.1 Management System Construction
9.2 Work Contents of Operating Maintenance
9.3 Guarantee of Operating Maintenance Resource
10 Establishment, Exercise and Management of Disaster Recovery Plan
10.1 Establishment of Disaster Recovery Plan
10.2 Exercise of Disaster Recovery Plan
10.3 Management of Disaster Recovery Plan
11 Emergency Response and Disaster Recovery
11.1 Emergency Response
11.2 Disaster Recovery
11.3 Restoration and Return
12 Supervision and Management
12.1 Audit
12.2 Recording
Appendix A (Informative) Working Focuses of Emergency Response and Disaster Recovery
Appendix B (Informative) Relationship between RTO/RPO and Disaster Recovery Capability Grade
