Business Continuity Planning
Overview
Financial firms need plans for what to do if normal business operations are disrupted. Common disruptions include power outages, severe weather, and interruptions to communication systems. To prepare for these situations, firms maintain comprehensive business continuity plans (BCPs).
Definitions
| Term | Definition | Example |
|---|---|---|
| Business continuity plan (BCP) | A comprehensive plan a firm maintains for what to do if normal business operations are disrupted. | Protocols used during a power outage, severe weather, or an interruption to communication systems. |
What a BCP typically includes
🔑 BCPs can vary in detail, but they typically include:
- Data recovery plans
- Meeting locations for employees
- Alternative communication plans for employees
- Alternative communication plans for customers
Delivery requirements
Firms must give customers an outline of their BCPs when customers open accounts, and they must also make the outline available on the firm’s website. In addition, firms must provide the BCP outline to customers if the customer requests it in writing.
| When / where | Requirement |
|---|---|
| Account opening | Firm must give the customer an outline of its BCP |
| Firm’s website | Outline must be made available |
| Customer request | Firm must provide the outline if the customer requests it in writing |
The request-based delivery obligation is triggered only by a written request.
Key points
Business continuity plans (BCPs)
- Protocols during business disruptions
- Provided to customers:
- Upon account opening
- Upon written request
- On the firm’s website
Sources
Primary/official references for the material in this chapter. Every link was fetched and returned HTTP 200 on 2026-08-15.
| # | Source | Publisher |
|---|---|---|
| 1 | Model rule — IA business continuity and succession planning | NASAA |
| 2 | BCP model rule text — records backup, alternate communications | NASAA |
| 3 | IA written policies and procedures model rule — information security, BCP, privacy | NASAA |
| 4 | Achievable Series 65 — chapter 4.6.8 | Achievable (course text) |