Exams or Audits

Expand all | Collapse all

BCP Testing Results- Are you referencing the Pandemic or testing as usual for your credit union?

  • 1.  BCP Testing Results- Are you referencing the Pandemic or testing as usual for your credit union?

    Posted 05-03-2021 03:09 PM
    I realize this is a VM blog but i'm hoping some of you also manage BCP for your credit union and are willing to share some info.  I'm curious how you have/will approach testing of business functions during the pandemic.  Has it been testing as usual or will you use the Pandemic to summarize area testing in addition to IT related testing?

    Lastly, if you are aware of a forum for credit union related questions that are not vendor management related feel free to share in your response.

    Thank you.


  • 2.  RE: BCP Testing Results- Are you referencing the Pandemic or testing as usual for your credit union?

    Posted 05-03-2021 03:41 PM
    Mark -
    My team also manages BC/DR as well as TPRM, but I'm not sure how common that is across other companies. We are not a financial organization. I would check to see whether there are any membership organizations related to the credit union industry, such as NCUA, and whether they have affinity groups for individuals working in that industry.

    In terms of your question regarding pandemic testing vs IT testing, we chose to perform a separate test of pandemic response as opposed to our general business continuity testing, with disaster recovery being a third test. But YMMV. I don't think there is a 'one right way' to do it.

    In case you haven't seen it, the FFIEC has some pandemic guidelines published back in March 2020:   FFIEC Press Release 

    Good luck!

    ------------------------------
    Kate Wakefield, CISSP / CIPT
    ------------------------------



  • 3.  RE: BCP Testing Results- Are you referencing the Pandemic or testing as usual for your credit union?

    Posted 05-04-2021 10:46 AM

    CUNA actually has some good threads through their councils that might be more what you are looking for.

     

     

     

    Thanks,

          Dave

     

    David Howe

    Chief Information Officer

     

     

     






  • 4.  RE: BCP Testing Results- Are you referencing the Pandemic or testing as usual for your credit union?

    Posted 05-05-2021 01:36 PM
    Good afternoon,
    Our Business Continuity Administrator works within the same department as I do so I asked for his input on this question. His response is below & I hope that is helpful.  

    We adopted a hybrid approach in 2020 where we tested what we felt appropriate (the test of the emergency communications system  for staff with a role in our BC Plan, and the Test and Train Migration) and we referenced the Pandemic for our Evacuation Drills and for the Pandemic Drill itself since our program specifies that if we have an incident such as a disaster, or a pandemic, that event counts for testing, or is a reason to not test.  Thus we did not run a Pandemic Drill since we are still living it 13 months in.