Design an end-to-end IT Business Continuity Plan (IT-BCP), including Business Impact Analysis (BIA) with RTO/RPO definitions and recovery strategies, tailored to insurance-specific processes and applications.
Map ICT dependencies and third parties (including cloud/SaaS providers), covering contractual continuity requirements, exit scenarios, and maintaining a register of critical providers.
Develop continuity and recovery procedures (data recovery, workplace continuity, and alternative IT operating modes during prolonged disruptions), with clear role allocation.
Align with governance and risk functions (including DORA expectations related to governance and risk management) and internal stakeholders.
Collaborate closely with the overall BCP lead.
Establish a testing and exercise program for the various procedures, including documentation of results and improvement actions.