J.P. MORGAN CHASE BANK, N.A. 1A - 2015

Home Browse Search

CONFIDENTIAL Business Resiliency Planning Recovering from or even avoiding a service disruption, whether a component failure or a full - scale disaster, depends on a comprehensive and effective contingency and business recovery planning process combined with experienced people to execute the plan. J.P. Morgan's business resiliency plans address all parts of the business - including employees, facilities, systems, telecommunications and clients. Our business resiliency plans are living documents that are updated on an ongoing basis to incorporate lessons learned and tested regularly to validate the effectiveness and completeness of the plans. Business Resiliency plans are classified as "company confidential" and cannot be disclosed or shared with external entities. For informational purposes, this document provides an overview of the Business Resiliency planning, testing and implementation approach in place for J.P. Morgan's Treasury Et Securities Services line of business. J.P. Morgan uses an integrated Business Resiliency strategy that addresses both the disaster recovery and business continuity planning required to resume operations from a disruption and provide for continuing operations over the course of a business interruption lasting up to 30 days. J.P. Morgan's firm -wide Business Resiliency program complies with all applicable guidelines from The U.S. Office of the Comptroller of the Currency (OCC), the U.S. Federal Financial Institutions Examination Council (FFIEC) and the Interagency White Paper on Sound Practices to Strengthen the Resilience of the U. S. Financial System. There are approximately 100 guidelines worldwide for resiliency and our Corporate policies and LOB guidelines were documented to account for the various global regulations and are subject to country audits. Recovery strategies and plans are documented to account for the worst -case scenario, involving loss of life and widespread geographic interruption. The firm's Treasury Et Securities Services line of business maintains a dedicated staff responsible for providing Business Resiliency services to all business units, The BR professionals provide governance, oversight and compliance functions for business and technology subject matter experts. The team is responsible for ensuring that corporate, regulatory and country- specific requirements are met. Disaster recovery strategies and plans (also known as information technology recovery plans) address the recovery of critical systems and applications from an interruption to normal processing cycles. A full range of technical solutions are used, with the specific technologies applied to each application /function depending on the criticality and recovery time objective of the specific application. Mainframe data centers use real -time disk mirroring and redundant hardware. Server -based applications can also use disk mirroring, clustering, geographically dispersed systems, and offsite tape backups, depending on the criticality and recovery window of the application(s). Documented business continuity strategies and plans address the recovery of functions and /or people to one or more viable alternate recovery sites. When similar processes utilizing like systems are performed at multiple locations, the use of a sister site or distributed operating model is generally the preferred recovery approach. A sister site is defined as a facility that performs like processes, using similar systems and equipment, and where local management possesses expertise on the processes to be recovered at that location. In situations where only workspace or access to remote applications is required, other J. P. Morgan locations outside the production site zone are the preferred approach. JTMor�an