Business Continuity and Disaster Recovery - Zenith Bank.pptx

This is a sample Business Continuity and Disaster Recovery (BC/DR) slideshow designed for the bank: Zenith, employing asset classification, business impact analysis and more

1. Disaster Recovery and Business Continuity Plan From the Inside Out ZENITH BANK PLC HEAD OFFICE RC: 1505224 Zenith Heights, Plot 84/87 Ajose Adeogun Street, P.O. Box 75315, Victoria Island, Lagos Tel: [phone] www.zenithbank .com GROUP 1 Group Leader: John Tighil | Group Members: Abdulrahman Yusuf, Atteng Awaji- Iyaham , Olotu Emmanuel, Simon Dulkebe Harling, Mustapha Fatima, Ande Daniella, Nwokedi Joel

2. 1 SESSION OVERVIEW 2 RISK ASSESS- MENT 3 RISK IDENTI- FICATION 4 CRITICAL SYSTEMS AND RESOURCES 5 BUSINESS IMPACT ANALYSIS 6 BUSINESS CONTINUITY STRATEGIES TABLE OF CONTENTS GROUP 1 (ZENITH BANK PLC) CYBER SECURITY DEPARTMENT CYB 407: INFORMATION DISASTER RECOVERY

3. ZENITH BANK PLC Financial Operations carried out by Zenith Bank are subject to various forms of service disruptions such as hardware malfunctions, software issues, security incidents and physical disruptions. Planning and preparation are imperative for a successful recovery in a crisis hence the need for a Business Continuity and Disaster Recovery plan (BC/DR) to be implemented. This session covers the multi-layered approach implemented in addressing the various aspects of preparedness and recovery such as ( i ) Risk Assessment and Business Impact Analysis (BIA) (ii) Business Continuity Plan (BCP) (iii) Disaster Recovery Plan (DRP) (iv) Implementation and Testing By implementing this plan, we of Zenith ensure our business reputation, stability and continuity as well as minimize the effects of disruptive events while providing an “inside out” roadmap for rapid recovery SESSION OVERVIEW 1

4. ZENITH BANK PLC ASSESSMENT OF RISK FACTORS 2 A risk is any flaw that can be exploited to cause disruptions in operational capabilities. There are different risks that Zenith Bank can face, and it is very crucial for the organization to identify such risk and plan to manage them effectively. The Following questions must be answered to assess hazards and potential impacts in order to mitigate expected risks: What kind of Risk? What could cause the Risk? What is the Impact of the Risk? How often does it occur? Will there be sufficient warning before it occurs? Can the Risk be Reduced or Eliminated? What Systems and Infrastructure are to be affected?

5. ZENITH BANK PLC IDENTIFICATION OF RISKS 3 As mentioned earlier, Zenith Bank is faced with various types of risk and Identifying such risk as well as assessing them allows us to determine critical systems and resources to be protected With the various risks identified, the systems and resources affected in the situation of an disruption can now be protected. Recoveries, Contingencies and Preventive measures can also now be implemented Risk Category Probability of Occurrence Potential Impact Hardware or Software Malfunction Medium High Cyber Security Breaches High High Data Loss or Corruption Medium High System Downtime or Outages Medium High Table 1.0 The following are various identified risk, their likelihood and potential impact to Zenith

6. ` ZENITH BANK PLC CRITICAL SYSTEMS AND RESOURCES 4 The following are critical systems and resources needed for the core functions of Zenith Bank which need to be protected from all forms of risk exposed to; Zenith Payment and Transaction Processing Systems Zenith Mobile Banking App Zenith Website Zenith ATM System Zenith Physical Branch Locations.

7. ZENITH BANK PLC BUSINESS IMPACT ANALYSIS This is a process that looks at how disruptive events affect Zenith Bank business operations, finances and reputation S/No Business Function Business Process Criticality 1 Mobile Banking App Remote Account Management Money Transfers Bill payments Mission Critical 2 Website Providing Product Information Online Banking Services Customer Services Mission Critical 3 ATM System Cash Withdrawals and Deposits Account Inquiries Other ATM Banking Services Mission Critical 4 System Downtime or Outages Personalized Customer Services Handling Complex Transactions Customer Relationship Management Mission Critical Table 2.0 The following are various zenith bank functions, process and criticality if disrupted 5

8. ZENITH BANK PLC BUSINESS CONTINUITY STRATEGIES 6 These are the various processes employed by Zenith Bank that maintains critical business functions in the event of a disruption RISK MITIGATION STRATEGIES 1 ALTERNATE WORK LOCATIONS 2 DATA BACKUP & RECOVERY PROCEDURES 3 COMMUNICATION STRATEGIES 4 PROCESS TO ACHIEVING BUSINESS CONTINUITY

9. ZENITH BANK PLC RECOVERY PHASE 7 Once a disruptive event has occurred, a recovery phase is begun so as to coordinate the appropriate recovery actions for any affected function or infrastructure. This includes: Deployment of incident response team Recovery prioritization System recovery procedures Infrastructure Recovery procedures Data recovery procedures Deployment Recovery Prioritization Infrastructure Recovery System Recovery Data Recovery

10. ZENITH BANK PLC TESTING, TRAINING, REVIEW AND MAINTENANCE 8 Zenith Commitment to ensuring security ensures the continuous testing of the BC/DRP process. Improving this process includes the following; Training and Testing Communication Strategies Testing & Improvement Strategies Training Program Development Internal Communication Enhancement Comprehensive Simulation Exercises Diverse Training Delivery Proactive External Communication Training Program and Plan Review Continuous Training Schedule Continuous Feedback Loop for Improvement Regular Evaluation and Feedback Mechanisms Detailed Record-Keeping

11. Thanks For Banking With Us !