2025 Regulatory Summit

CLOUD FOUNDATIONS FOR FINANCIAL SERVICES FINANCIAL SERVICES | Business Continuity and Disaster Recovery

Requirements may include: Maintaining backup and recovery capabilities sufficiently resilient and geographically diverse and that are reasonably designed to achieve next business day resumption of business and few hours resumption of critical systems following a wide-scale disruption

Customer Samples of Managed Processes/Controls

Business Continuity and Resilience Physical Security Requirements Backup Management ENABLERS

AWS Services AWS Resilience Hub – Resilience governance Amazon Route 53 Application Recovery Controller - Simplify and automate recovery for highly available applications AWS Fault Injection Service - Improve resiliency and performance with controlled experiments Resources Incident Management Table Top (IMTT) Simulated Conditions Response and Management (SCRaM)

ENABLERS

[TITLE] AWSCA-10.1: Critical AWS system components are replicated across multiple Availability Zones and backups are maintained. [TITLE] AWSCA-10.3: AWS contingency planning and incident response playbooks are maintained and updated to reflect emerging continuity risks and lessons learned from past incidents. The AWS contingency plan is tested on at least an annual basis. g yp nts are replicated across multiple Availability d incident response playbooks are maintained ssons learned from past incidents. The AWS

AWS Samples of Managed Controls

19

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark.

Next Steps: Learning Paths: Foundational Cloud Journey

Security • Security Awareness Training (15 min training) • AWS Security Fundamentals (2 hours)

Cloud Practitioner • Cloud Practitioner Essentials (digital 7 hours) • AWS Cloud Quest: Cloud Practitioner (digital game based learning 12 hours)

Or Alternate AWS offered session *

© 2024, Amazon Web Services, Inc. or its affiliates. All rights reserved. Amazon Confidential and Trademark.