Compliance within - BNP Paribas

Phase 2 – Analysing and reporting continuity imperatives: Each entity defi nesthe critical components necessary to continue working in an emergency:strategic activities and any corresponding fi nancial, commercial, regulatoryor reputational impacts are listed, prioritised and validated. The maximumperiods of permitted interruption are assessed, validated and reviewed on aregular basis. Strategic databases and tools are listed, prioritised and validated,in particular minimum system usage modes and data access, togetherwith the maximum allowable data losses. Logistics and communication toolsare identifi ed, and conditions ensuring employee and data security (authorisationmanagement, back-ups and data warehousing) are defi ned.Phase 3 – Launch and implementation of business continuity strategies:Procedures are in place for triggering continuity solutions in each crisis situation.Organisational, functional and technical procedures are documentedand updated at least once a year.Phase 4 – Continuous review: The business continuity plans are regularlytested and the corresponding documentation is updated in line with changesin the technical or regulatory environment.Over the past few years, BNP Paribas has signifi cantly increased its resilience,although it remains impossible to protect the Group against every eventuality.Business continuity is not only a requirement imposed by banking regulations,it is also a major strategic challenge for the Group, in view of offering itsclients, shareholders and employees a commitment of the Bank’s strengthand resistance in an increasingly complex and volatile environment wheretensions may be experienced more frequently. This imperative is refl ected inthe business continuity plans in place, which help improve the performanceof operational risk control and management.Report on Environmental and Social Responsibility 2007 /////// Compliance within BNP Paribas86