{"id":15207,"date":"2019-04-04T15:00:47","date_gmt":"2019-04-04T09:30:47","guid":{"rendered":"https:\/\/enterslice.com\/learning\/?p=15207"},"modified":"2019-05-30T12:28:52","modified_gmt":"2019-05-30T06:58:52","slug":"business-continuity-plan-and-disaster-recovery-by-sebi","status":"publish","type":"post","link":"https:\/\/enterslice.com\/learning\/business-continuity-plan-and-disaster-recovery-by-sebi\/","title":{"rendered":"Guidelines for Business Continuity Plan (BCP) and Disaster Recovery (DR) by SEBI"},"content":{"rendered":"<p>On March 26, 2019, the Securities Exchange Board of India (SEBI) with the recommendation of Technical Advisory Committee (TAC), has issued guidelines for Business Continuity Plan (BCP) and Disaster Recovery (DR) of <a class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Market&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A market is a structured environment, either physical or virtual, where buyers and sellers convene to trade goods and services. This trading hub operates based on the principles of supply and(...)&lt;\/div&gt;\"  href=\"https:\/\/enterslice.com\/learning\/terms\/market\/\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]'>Market<\/a> Infrastructure Institutions (MIIs). Previously, SEBI had issued prescribed business continuity and, disaster recovery framework for stock exchanges and depositories in 2012. Further, the new guidelines develop and expand these. <\/p>\n\n\n\n<p>Now\nlet&rsquo;s go ahead and try to widen the horizon of this latest guideline.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Background\nof Business Continuity Plan and Disaster Recovery Plan<\/strong><\/h2>\n\n\n\n<p>While\nmost of the Indian companies look at a&nbsp;DR\/BCP&nbsp;implementation&nbsp;and\naudits internally, they may not consider&nbsp;business continuity\nmanagement&nbsp;(BCM). In India, there is a very positive trend in the market\nas more and more companies are looking for BCM implementation. <\/p>\n\n\n\n<p>One of the first Indian companies to implement a full-fledged BCM was the National Stock Exchange (NSE) in 1997. National Securities Depository Limited (NSDL) was yet another early entrant to BCM practices in India. The implementations at these organisations have matured over a while. Once an organisation is confident of its application, the next step is to commence internal and external business continuity audits.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What\nis Business Continuity Planning Audit?<\/strong><\/h2>\n\n\n\n<p>A business continuity planning (BCP) audit helps:<\/p>\n\n\n\n<ul><li>Organisations define policies and provide remedial recommendations to tackle disasters. <\/li><li>The BCP audit brings transparency to organisational management of internal systems and processes.<\/li><li>It enables organisations to handle the risks on account of known and unexpected disasters. <\/li><li>It will assess your organisation&rsquo;s capabilities to recover and resume activities in case of an incident. <\/li><\/ul>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-1024x187.png\" alt=\"Business Continuity Plan\" class=\"wp-image-15208\" width=\"755\" height=\"137\" srcset=\"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-1024x187.png 1024w, https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-300x55.png 300w, https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-768x140.png 768w, https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan.png 1246w\" sizes=\"(max-width: 755px) 100vw, 755px\"\/><\/figure><\/div>\n\n\n\n<p>In India, both SEBI and RBI have mandated BCP and DR.\nAs a result, all major Indian financial institutions are already compliant.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What are the best practices for BCP Audit?<\/strong><\/h2>\n\n\n\n<p>Note down the following best practices for BCP Audit:<\/p>\n\n\n\n<ul><li>Appoint a Single Point of Contact for the continuity of business<\/li><li>Set up standard operating procedures<\/li><li>Use a phased approach at the time of conducting the <a rel=\"noreferrer noopener\" aria-label=\"audit (opens in a new tab)\" href=\"https:\/\/enterslice.com\/auditing-services\" target=\"_blank\">audit<\/a><\/li><li>Try to raise awareness in the organisation<\/li><li>Develop the scope for business continuity audit and follow the standards<\/li><li>Select the right auditors<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Latest Circular on Business Continuity Plan and Disaster Recovery Plan<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter is-resized\"><img decoding=\"async\" loading=\"lazy\" src=\"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-2.png\" alt=\"Business Continuity Plan\" class=\"wp-image-15210\" width=\"719\" height=\"290\" srcset=\"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-2.png 929w, https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-2-300x121.png 300w, https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan-2-768x310.png 768w\" sizes=\"(max-width: 719px) 100vw, 719px\"\/><figcaption><strong>Latest Circular on Business Continuity Plan and Disaster Recovery Plan<\/strong><\/figcaption><\/figure><\/div>\n\n\n\n<p>You can read the complete circular <a href=\"https:\/\/www.sebi.gov.in\/legal\/circulars\/mar-2019\/guidelines-for-business-continuity-plan-bcp-and-disaster-recovery-dr-of-market-infrastructure-institutions-miis-_42482.html\" target=\"_blank\" rel=\"noreferrer noopener\" aria-label=\" (opens in a new tab)\">here<\/a><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Key\nHighlights related to guidelines on Business Continuity and Disaster Recovery\nPlan<\/strong><\/h2>\n\n\n\n<p>One of the main reason to introduce these guidelines is the advancement in &lsquo;technology and improved automation of processes in terms of transitioning time, wherein the operations can be moved from the Primary Data Centre (PDC) to the DRS.<\/p>\n\n\n\n<ul><li>SEBI had advised all Market Infrastructure Institutions (MIIs), the stock exchanges, clearing corporations and depositories to have in place a business continuity plan (BCP) and disaster recovery sites (DRS) to maintain data and transaction integrity. <\/li><li>The depositories should also ensure zero data loss by adopting a suitable mechanism.<\/li><li>The institutions are required to have Recovery Time Objective and Recovery Point Objective of not more than 4 hours and 30 minutes<\/li><li>The DRS should preferably be set up in the different seismic zone and in the case due to certain reasons such as operational constraints, change of seismic zones, etc, the minimum distance of 500 kilometres will be ensured between the primary data centre (PDC) and DRS.<\/li><li>The regulator said the work force deployed at DRS should be sufficient in number and should have the same expertise as available at PDC in terms of knowledge and awareness of various technological and procedural systems and processes relating to all operations such that DRS\/NS can function at short notice, independently. <\/li><li>MIIs should try to develop systems that do not require configuration changes at the end of trading members\/ clearing members\/ depository participants for the switchover from the PDC to DRS.<\/li><li> They should further test such switchover functionality by conducting unannounced 2-day live trading session from its DRS, which would help to gauge the state of readiness of various other processes and procedure relating to business continuity and disaster recovery that may not get tested in a planned exercise.<\/li><li>Live trading sessions from DR site shall be scheduled for at least two consecutive days in every six months, on normal working days.&nbsp;<\/li><li>The results and observations of these drills should be documented and placed before the governing board of stock exchanges\/ clearing corporations\/ depositories.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Conclusion<\/strong><\/h2>\n\n\n\n<p>Businesses are increasingly looking at ways to protect their business and critical data. Disaster Recovery (DR) solutions work successfully and efficiently to help achieve this. Disaster Recovery Management (DRM) at the end of the day is not about information technology but a <g class=\"gr_ gr_7 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace\" id=\"7\" data-gr-id=\"7\">management driven<\/g> business process. On the other hand, business continuity planning (BCP) or business continuity management (BCM) helps in identifying those critical parts of an organisation that cannot afford to suffer a loss, viz., data and information. Moreover, the guidelines seem to be robust and encouraging for <g class=\"gr_ gr_20 gr-alert gr_gramm gr_inline_cards gr_disable_anim_appear Grammar only-del replaceWithoutSep\" id=\"20\" data-gr-id=\"20\">the Indian<\/g> Organisations.<\/p>\n\n\n\n<p>For more information related to the drafting of <a href=\"https:\/\/enterslice.com\/business-plan\">Business Plan<\/a> policies and the information related thereto, kindly contact the team of experts at Enterslice.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>On March 26, 2019, the Securities Exchange Board of India (SEBI) with the recommendation of Technical Advisory Committee (TAC), has issued guidelines for Business Continuity Plan (BCP) and Disaster Recovery (DR) of Market Infrastructure Institutions (MIIs). Previously, SEBI had issued prescribed business continuity and, disaster recovery framework for stock exchanges and depositories in 2012. Further, [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":15213,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[209,1599],"tags":[2512],"acf":{"service_id":"215"},"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v14.6.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Business Continuity Plan and Disaster Recovery guidelines by SEBI<\/title>\n<meta name=\"description\" content=\"SEBI had prescribed framework for Business Continuity Plan and Disaster Recovery Site (DRS) for stock exchanges and depositories\" \/>\n<meta name=\"robots\" content=\"index, follow\" \/>\n<meta name=\"googlebot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta name=\"bingbot\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/enterslice.com\/learning\/business-continuity-plan-and-disaster-recovery-by-sebi\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Business Continuity Plan and Disaster Recovery guidelines by SEBI\" \/>\n<meta property=\"og:description\" content=\"SEBI had prescribed framework for Business Continuity Plan and Disaster Recovery Site (DRS) for stock exchanges and depositories\" \/>\n<meta property=\"og:url\" content=\"https:\/\/enterslice.com\/learning\/business-continuity-plan-and-disaster-recovery-by-sebi\/\" \/>\n<meta property=\"og:site_name\" content=\"Enterslice\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/enterslice\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-04T09:30:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-05-30T06:58:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"700\" \/>\n<meta name=\"twitter:card\" content=\"summary\" \/>\n<meta name=\"twitter:creator\" content=\"@enterslice\" \/>\n<meta name=\"twitter:site\" content=\"@enterslice\" \/>\n<!-- \/ Yoast SEO plugin. -->","authorName":"Neelansh Gupta","authorImageUrl":"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/IMG_20190305_185223.jpg","authorDescription":"Mr. Neelansh Gupta is a Legal Counsel having extensive in-depth knowledge of various laws.  He has completed his graduation in law and has experience in IPR, Taxation and Corporate laws.","postViews":629,"readingTime":3,"nextPost":{"id":15219,"slug":"doctrine-of-frustration-under-the-indian-contract-act-1872"},"prevPost":{"id":15195,"slug":"no-agreement-on-why-consumer-goods-demand-rose-after-gst"},"featuredMediaUrl":"https:\/\/enterslice.com\/learning\/wp-content\/uploads\/2019\/04\/Business-Continuity-Plan.jpg","postTerms":"Business Registrations","_links":{"self":[{"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/posts\/15207"}],"collection":[{"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/comments?post=15207"}],"version-history":[{"count":0,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/posts\/15207\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/media\/15213"}],"wp:attachment":[{"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/media?parent=15207"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/categories?post=15207"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/enterslice.com\/learning\/wp-json\/wp\/v2\/tags?post=15207"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}