This specification specifies the management requirements of information system disaster recovery for banks.
This specification is applicable to People's Bank of China and banking financial institutions (including foreign-funded banks, hereinafter referred to as "organizations") established within the territory of the People's Republic of China.
Foreword I Introduction II 1 Scope 2 Normative Reference 3 Terms and Definitions 4 Overview of Information System Disaster Recovery for Banks 4.1 Disaster Recovery Contents 4.2 Periodic Duty for Disaster Recovery 4.3 Inter-organization Cooperation 5 Establishment and Responsibilities of Organizational institution 5.1 Establishment of Organizational institution 5.2 Composition and Responsibilities of Organizational institution 6 Demand Analysis of Disaster Recovery 6.1 Risk Analysis 6.2 Business Impact Analysis 6.3 Determination of Disaster Recovery Demand 7 Establishment of Disaster Recovery Strategy 7.1 Cost Risk Analysis and Strategy Determination 7.2 Disaster Recovery Capability Grade 7.3 Layout of Backup Center for Disaster Recovery 7.4 Acquisition and Guarantee of Resource and Service 8 Construction of Backup Center for Disaster Recovery 8.1 Infrastructure Construction 8.2 Construction of Backup System for Disaster Recovery 8.3 Project Supervision 9 Operating Maintenance Management of Backup Center for Disaster Recovery 9.1 Management System Construction 9.2 Work Contents of Operating Maintenance 9.3 Guarantee of Operating Maintenance Resource 10 Establishment, Exercise and Management of Disaster Recovery Plan 10.1 Establishment of Disaster Recovery Plan 10.2 Exercise of Disaster Recovery Plan 10.3 Management of Disaster Recovery Plan 11 Emergency Response and Disaster Recovery 11.1 Emergency Response 11.2 Disaster Recovery 11.3 Restoration and Return 12 Supervision and Management 12.1 Audit 12.2 Recording Appendix A (Informative) Working Focuses of Emergency Response and Disaster Recovery Appendix B (Informative) Relationship between RTO/RPO and Disaster Recovery Capability Grade