Question: Should the Pandemic plan have its own BIA and risk assessment completed? If so, should you also have a Pandemic BIA and risk assessment completed for each office?
Answer: I would incorporate effects from the pandemic into the BCP BIA. You will need to be sure and evaluate the processes and functions and the potential impact from a pandemic perspective which may differ from your BCP scenarios. Look at page D-5 of the FFEIC March 2008 Business Continuity Handbook. The risk assessment is somewhat different because you will probably have different threats and risks and maybe controls depending on the location of the office so you do need to address each office in the risk assessment, but you can easier address these areas in your BCP risk assessment. See page D-6 of the Handbook for more detail.
BankersOnline is a free service made possible by the generous support of our advertisers and sponsors. Advertisers and sponsors are not responsible for site content. Please help us keep BankersOnline FREE to all banking professionals. Support our advertisers and sponsors by clicking through to learn more about their products and services.