Answer:
Probably not. How the bank responds to a natural disaster, like a tornado, is very different than how it must respond to a cyber-incident. Your current I.S., I.T., and BCP could serve as a foundation for a Cyber Incident Response Plan (CIRP), but the latter must address the unique, adaptive nature of cyber-attacks.