New York Codes, Rules and Regulations
Title 23 - FINANCIAL SERVICES
Chapter I - Regulations of the Superintendent of Financial Services
Part 200 - VIRTUAL CURRENCIES
Section 200.17 - Business continuity and disaster recovery

Universal Citation: 23 NY Comp Codes Rules and Regs ยง 200.17

Current through Register Vol. 46, No. 39, September 25, 2024

(a) Each Licensee shall establish and maintain a written business continuity and disaster recovery ("BCDR") plan reasonably designed to ensure the availability and functionality of the Licensee's services in the event of an emergency or other disruption to the Licensee's normal business activities. The BCDR plan, at minimum, shall:

(1) identify documents, data, facilities, infrastructure, personnel, and competencies essential to the continued operations of the Licensee's business;

(2) identify the supervisory personnel responsible for implementing each aspect of the BCDR plan;

(3) include a plan to communicate with essential Persons in the event of an emergency or other disruption to the operations of the Licensee, including employees, counterparties, regulatory authorities, data and communication providers, disaster recovery specialists, and any other Persons essential to the recovery of documentation and data and the resumption of operations;

(4) include procedures for the maintenance of back-up facilities, systems, and infrastructure as well as alternative staffing and other resources to enable the timely recovery of data and documentation and to resume operations as soon as reasonably possible following a disruption to normal business activities;

(5) include procedures for the back-up or copying, with sufficient frequency, of documents and data essential to the operations of the Licensee and storing of the information off site; and

(6) identify third parties that are necessary to the continued operations of the Licensee's business.

(b) Each Licensee shall distribute a copy of the BCDR plan, and any revisions thereto, to all relevant employees and shall maintain copies of the BCDR plan at one or more accessible off-site locations.

(c) Each Licensee shall provide relevant training to all employees responsible for implementing the BCDR plan regarding their roles and responsibilities.

(d) Each Licensee shall promptly notify the superintendent of any emergency or other disruption to its operations that may affect its ability to fulfill regulatory obligations or that may have a significant adverse effect on the Licensee, its counterparties, or the market.

(e) The BCDR plan shall be tested at least annually by qualified, independent internal personnel or a qualified third party, and revised accordingly.

Disclaimer: These regulations may not be the most recent version. New York may have more current or accurate information. We make no warranties or guarantees about the accuracy, completeness, or adequacy of the information contained on this site or the information linked to on the state site. Please check official sources.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.