Back

Refrain from adopting impromptu measures when continuity procedures exist.


CONTROL ID
13093
CONTROL TYPE
Behavior
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Establish, implement, and maintain a continuity plan., CC ID: 00752

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • During a system outage, the FI should refrain from adopting impromptu and untested recovery measures over pre-determined recovery actions that have been rehearsed and approved by management. Ad hoc recovery measures carry high operational risks as their effectiveness has not been verified through ri… (§ 8.3.1, Monetary Authority of Singapore: Technology Risk Management Guidelines)
  • During the recovery process, the FI should follow the established disaster recovery plan that has been tested and approved by management. The FI should avoid deviating from the plan as untested recovery measures could exacerbate the incident and prolong the recovery process. In exceptional circumsta… (§ 8.2.3, Technology Risk Management Guidelines, January 2021)