2026-01-06 | BM 1225Added · Updated
This framework mandates that licensed domestic banks, finance and leasing companies, and their subsidiaries establish a comprehensive Business Continuity Management system covering governance, policy, strategy, and recovery planning. It requires the Board of Directors to approve the BCM policy and Tier-1 critical service impact tolerances, while senior management must define Service Recovery Time Objectives and maintain a dedicated BCM Committee meeting at least quarterly. The document further obligates entities to conduct regular Business Impact Analyses, integrate BCM into enterprise risk management, and perform annual testing and independent audits to ensure operational resilience against disruptions.