Baseline Nonbank Cybersecurity Exam Program

Question 25

Are the business continuity/disaster recovery plans reviewed, tested, and updated at least annually or when significant changes occur?

9

Question 26

Are remediation plans developed to address gaps identified during the testing? Are these efforts tracked and reviewed regularly?

10