BBK continuously strive to enhance its local and international presence by adopting global service excellence standards and introduce pioneering and innovative products. Over the years, BBK ensured compliance to the highest level of practices and followed efficient and reliable operating principles to proactively control and mitigate risks of business disruptions that may potentially affect the clients, employees, and stakeholders.
BBK Group adopts an ISO certification and robust business continuity program (ISO 22301:2019) that comprises a comprehensive BCM Policy, Business Operations plans, and Disaster Recovery procedures. The Bank and external auditors review these policies and procedures periodically prior to the Board of Directors' revisions and approvals.
The BBK Group has great confidence in the level of control produced by the adopted policies and procedures that ensure uninterrupted delivery of products and services during critical events causing business disruption. The flexibility of the adopted Business Continuity Management and Disaster Recovery approach allows the continuation of business as usual via remote locations even during events such as and not limited to: loss of services or infrastructure, denial of access, cyber-attack, pandemics, and regional crises with scalability for any duration of time.
Business Continuity and Disaster Recovery Center.
BBK maintains a state-of-the-art Business Continuity and Disaster recovery center located in the Riffa area, allowing a speedy recovery of all the essential financial services. BBK Bahrain maintains isolated production and Disaster Recovery data centers, both equipped with power supplies (UPS) and generators for uninterrupted power supply in the event of full or partial loss of the power utility.
The production data center is staffed 24/7 and is fully equipped with contingency features. The Disaster Recovery data center is located in Riffa within a facility owned by BBK and operated by the BBK IT division.
Data for all mission-critical systems is replicated on our backup data center. Data for all business systems are backed up on a daily basis and also stored at an alternative site and Cloud. Periodic backup, failover, and recovery testing are also performed.
We plan to quickly recover and resume business operations after a significant business disruption, the Business Continuity plans provide the needed instructions and guidelines to respond to unforeseen events by safeguarding our employees and property, making a financial and operational assessment, protecting the firm's data, information and records. A Crisis Management Team (CMT) comprises of experienced members of the executive management and is designated to manage crises of different magnitude and impact. The Business Continuity Strategy includes mitigation in the form of adequate insurance coverage and maintenance of offsite data storage and backup systems that are designed to facilitate the resumption of business processes within recovery time objectives agreed based on a bank-wide business impact analysis. In the event that we cannot continue operations from our main premises, BBK will transfer critical business activities to the Business Continuity Center in Riffa and recover critical processes and systems within 4 hours of a business continuity plan activation (actual recovery times may vary, however as subject to external factors beyond the Bank's control). The Bank offers its services via alternative channels, including branches, internet banking, and mobile banking. In the event of a material disruption to the Bank's services, the Bank's website and social media channels will provide a regular update.
To measure continuity plan's realistic and adequacy level, BBK preform annual real-time and simulation drill and test to identify the areas for improvement to ensure appropriate resolution and update reflected in Bank's plan and infrastructure. Capacity and resource requirements are also reviewed periodically.
All BBK employees must be aware of their responsibilities in relation to BCM and undertake mandatory awareness training on an annual basis. Those with primary recovery roles are required to participate in periodic business continuity drills and test regularly.
The Bank's business continuity plan complies with the guidelines issued by regulatory bodies and is subject to regular internal, external, and regulatory reviews. BBK's business continuity program is reviewed annually by the Bank's Internal Audit and ISO 22301 Certification body.