What's the difference between a business continuity plan (BCP), a disaster recovery plan (DRP), and an incident response plan (IRP)? They might sound like different ways of saying the same thing, but they're distinct elements of your RIA's resilience strategy. Knowing where one ends and the next begins is the difference between a firm that's compliant and prepared, and one that struggles to respond when the unexpected happens.
This webinar breaks down what each plan covers, where they connect, and the related regulatory expectations.
You'll learn:
- The difference between a BCP, a DRP, and an IRP and where they overlap
- Regulatory expectations and best practices for business resiliency, including Compliance Rule 206(4)-7 and Amended Reg S-P
- Where state rules add obligations beyond the federal baseline
- How to build, map, and test effective, compliant BCP, DRP and IRP plans
- The role service providers and third parties play in BCP, DRP and IRP plans
- Where state rules add obligations beyond the federal baseline
This webinar is for RIA compliance officers and operations leads who want to ensure their firms are positioned to weather disruptions and who are compliant with business continuity as well as incident response requirements.
