Buland Investments Ltd, is a Jaipur-based Non-Banking Finance Company (NBFC) and has more than 300 branches/customer service points (CSP) across India. Company mainly offers housing loans, loans against property, and per
CS Professional · Environmental, Social and Governance (ESG) Principles and Practice · PYQS · June 2025
Buland Investments Ltd, is a Jaipur-based Non-Banking Finance Company (NBFC) and has more than 300 branches/customer service points (CSP) across India. Company mainly offers housing loans, loans against property, and personal loans to all segments of society including salaried employees, professionals and businessmen. The Company has a paid-up capital of ₹ 100 crore, public deposits of ₹ 250 crore and borrowings of ₹ 80 crore (₹ 40 crore each from public and private sector banks). Most of its operations in online mode with customers applying online and uploading their KYC and other financial documents through a secured web portal. Though the Company is on a growth trajectory, it still does not have robust policies and procedures which guide its operations. Recoverability from the customers, loan defaulters is a challenge on operational front. From a corporate perspective, adhering to Reserve Bank of India (RBI) Digital Lending norms and Cyber Security Frameworks are key challenges for the Company. It has hired few IT professionals to develop an inhouse IT security team. However, despite these efforts, the Company suffered a major cyber-attack recently, leading to theft of sensitive KYC data of large number of customers. RBI has imposed huge penalties and suspended the Company's operations. The media coverage of the incident has further damaged the Company's reputation, causing panic among customers, depositors and investors. In this context, answer the following questions: Few investors commented, the Company should have a Disaster Recovery Plan (DRP). Indicate the elements of DRP.
Answer & Explanation:
One way your organization can prepare and protect itself from disasters is to create and implement a disaster recovery plan (DRP). Organizations should create a disaster recovery plan that can address any type of disaster. The plan should be easy to follow and understand, and be customized to meet the unique needs of the organization. Typical elements in a disaster recovery plan include the following: Create a disaster recovery team: The team will be responsible for developing, implementing, and maintaining the DRP. A DRP should identify the team members, define each member's responsibilities, and provide their contact information. The DRP should also identify who should be contacted in the event of a disaster or emergency. All employees should be informed of and understand the DRP and their responsibility if a disaster occurs. Identify and assess disaster risks: Your disaster recovery team should identify and assess the risks to your organization. This step should include items related to natural disasters, man-made emergencies, and technology related incidents. This will assist the team in identifying the recovery strategies and resources required to recover from disasters within a predetermined and acceptable timeframe. Determine critical applications, documents, and resources: The organization must evaluate its business processes to determine which are critical to the operations of the organization. The plan should focus on short-term survivability, such as generating cash flows and revenues, rather than on a long term solution of restoring the organization's full functioning capacity. However, the organization must recognize that there are some processes that should not be delayed if possible. One example of a critical process is the processing of payroll. Specify backup and off-site storage procedures: These procedures should identify what to back up, by whom, how to perform the backup, location of backup and how frequently backups should occur. All critical applications, equipment, and documents should be backed up. Documents that you should consider backing up are the latest financial statements, tax returns, a current list of employees and their contact information, inventory records, customer and vendor listings. Critical supplies required for daily operations, such as checks and purchase orders, as well as a copy of the DRP, should be stored at an off-site location. Test and maintain the DRP: Disaster recovery planning is a continual process as risks of disasters and emergencies are always changing. It is recommended that the organization routinely test the DRP to evaluate the procedures documented in the plan for effectiveness and appropriateness. The recovery team should regularly update the DRP to accommodate for changes in business processes, technology, and evolving disaster risks. In summary, an organization must develop a recovery team to create a disaster recovery plan that includes identifying and assessing disaster risks, determining critical applications, and specifying backup procedures. Other procedures may be included in the plan based on the organization. The recovery team and organization must then implement the DRP and follow through on the plan procedures. The DRP should be continually tested and maintained to consistently prepare the organization for evolving disasters and emergencies.
Topics: Disaster Recovery Planning (DRP)
Related Questions in this Topic
- 'There are several standards and guidelines that organizations can use to conduct sustainability audits.' Explain.
- Global Reporting Initiative (GRI) Reporting protocols aim to cover a wide range of ESG issues. GRI offers environmental ...
- Pheonix Ltd is among top 200 companies in terms of market capitalization of various companies listed on the stock exchan...
- Vrindavan Mithai Wala Ltd, a listed company, has long been a popular name in the retail stores and restaurants. With an ...
- Vrindavan Mithai Wala Ltd, a listed company, has long been a popular name in the retail stores and restaurants. With an ...