I realize that many people are *responsible* for disaster recovery, but there is generally one person who is primarily creating and maintaining the plan.

I've spoken to so many people about DR issues, and I've found it interesting to see how it gets added to the job description of a wide range of areas, so I was curious about who handles DR in your institution?

I'm the Information Systems officer, and I handle most things IT related, including Information Security... and the Disaster Recovery Plan.

As sort of a follow up, do you find there are particular parts of the plan that you struggle with, because it's not really your "area"? Me, for example, I struggled with the Pandemic Preparedness Plan, because it seemed like something geared more toward Human Resources than IT. (I ultimately got a wonderful sample from someone here on BOL, which helped me immensely)

So I'm curious... who's in charge of your DR plan?

Responsibility for DR at our bank resides in the Risk Mangement area.

Initial set up and administration of the plan: IT Dept.
Writing and maintaining the plan: Department Heads (or designee)are responsible for their areas.

The Operations Department handles a majority of the BCP at my current institution. At my previous employer, again it was handled through Operations, however there was a BCP Committee that department heads made up. We met every other month.

Well, would you believe the CRA Officer?

Ok, it is sort of a long story, well not really I guess.

Originally it was our Sr. IT Officer and then he was let go. He was not replaced so his job duties were being passed out. The plan was a real mess and since I am in charge of special projects as well as the CRA Officer I was given the honor. I am also quite handy with a computer and possess pretty good social skills. And let me tell you, when you want to get this much information and work from each and every department of your bank, it helps to have good social skills!

Its in operations here. Im a newbie to it also. I inherited the DR plan when I accepted the new position. I have been pulling my hair out ever since.

I marked "other"...it is IT and the CFO, but mainly the CFO.

We're a 2-bank holding company, and we take the team approach. Disaster recovery is handled by our technology steering committee, which consists of both CEOs, the CFO, IT, operations, compliance & security. The security officer & head of IT jointly 'own' the process.

At my last bank, our President was in charge of the overall program with dept heads each on the committee(comp. officer, SVP lending, HR, oper.). I can certainly understand what you are saying about needing good social skills!! The best thing we ever did was plan a mock disaster. One day when everyone showed up to work they found a note taped to the door directing them to our remote drive up facility. Once all staff had arrived, they were filled in on the type of "disaster" the bank had experienced the night before. We brainstormed and got the whole staff involved. Then we assigned various parts of the plan that still needed work to teams of 2-3. Cooperation was much better as people then understood the impact of a disaster on the day to day operations. It made it alot more fun and gave everyone ownership in the process.

Posted other: Our CFO has the DR responsibilies in our bank.

I am thinking that it is time for a mock disaster because I still have a few stragglers that I just can not convince to "own up" to their part in the process and they are in parts of the bank that I just have no knowledge to build on.

In our institution, it's the Manager of Vendors, Property Acquisition and Business Continuity, which reports to IT.

I, as Compliance Officer, update the plan annually and present to the Board and I also chair our Disaster Recovery Committee. The committee consists of IT, compliance, HR, Administration and Operations. We collectively "own" disaster recovery and have equal input on DR issues. The pandemic issue is being spearheaded by our HR person.

That would be me, myself, and I.

But, thanks to some very generous BOL'ers, I had lots of information to build a very comprehensive DR/BC policy that management is very happy with. I'll say it again. I don't know how I ever did my job without BOL.

At our bank we have a designated officer for disaster recovery, who also handles all of the maintenance and security issues at our branches. In addition we have a DR committee with Dept. heads from each area of the bank.

Hi Pizza Queen,
I am in charge of developing a "bird flu" pandemic policy. Has anyone done one of these yet? I would love to get my hands on a sample!
I've gotten some info from the CDC and ABA websites.
bb

i would love to have a copy of your sample, KrisH. Where did you get it?
bb

I sent you a PM, Beth.

Risk Management

I checked off "Other". I am primarily (so to speak) responsible for collecting all of the information from the various areas and establishing the plan. I must also maintain, test, etc.....

I am responsible---but then I am responsible for IT, Security, Compliance, BSA, OFAC, Cashier, etc, etc. The only thing I am not responsible for is Human Resources and that I just gave up a few years ago. Basically, if it has to do with operations or compliance it is my responsibility.

But isn't that the way it is in small banks.

It's the security officer here, but I (the compliance officer) just went to a seminar on pandemic procedures and wrote up a summary (along with a packet of other information I found while researching it) and gave it to the officer to assist in the actual writing of the disaster recover plan.
So basically, I research it, and then someone else writes it.