2022-01-01
The Capital Markets Authority has issued these 2022 Guidelines to establish minimum disaster recovery and contingency planning standards for all approved and licensed financial entities. Regulated persons must conduct comprehensive risk analyses, maintain systematically categorized primary and secondary printed and electronic records with quarterly updates, and store backup copies at secure off-site locations. Each entity is required to establish a disaster recovery committee responsible for implementing business continuity plans, promptly notifying the Authority of operational changes or disasters, and aligning operations with ISO 22301 and ISO 31000 standards.