Business Continuity Planning (BCP)

 

Frequently Asked Questions Related to Regulatory Relief Due to the Coronavirus Pandemic

MARCH 18, 2020
Due to the coronavirus pandemic (COVID-19), FINRA is providing temporary relief for member firms from rules and requirements in the Frequently Asked Questions below. The relief provided does not extend beyond the identified rules and requirements. As coronavirus-related risks decrease, member firms should expect to return to meeting any regulatory obligations for which relief has been provided. When appropriate, FINRA will publish a Regulatory Notice announcing a termination date for the regulatory relief that will provide member firms with time to make necessary operational adjustments.

FINRA requires firms to create and maintain written business continuity plans (BCPs) relating to an emergency or significant business disruption. Rule 4370—FINRA's emergency preparedness rule — spells out the required BCP procedures. A firm's BCP must be appropriate to the scale and scope of its business.

BCP procedures must be reasonably designed so the firm can meet its existing obligations to customers. A firm must disclose to its customers how its BCP addresses the possibility of a significant business disruption and how the firms plan to respond to events of varying scope. This BCP disclosure must be made in writing to customers when they open their account, posted on the firm's website if they maintain one and mailed to customers upon request. The BCP also must be made available promptly to FINRA staff if requested.

What to Include in a Business Continuity Plan

FINRA Rule 4370 gives a firm flexibility in designing a BCP. It may be tailored to the size and needs of the firm, but at a minimum it must include the following elements:

  • Data backup and recovery (hard copy and electronic);
  • All mission critical systems;
  • Financial and operational assessments;
  • Alternate communications between customers and the firm, and between the firm and employees;
  • Alternate physical location of employees;
  • Critical business constituent, bank, and counterparty impact;
  • Regulatory reporting;
  • Communications with regulators; and
  • How the firm will assure customers' prompt access to their funds and securities in the event that the firm determines that it is unable to continue its business.

A firm must address the elements to the extent applicable and necessary. If any of the elements is not applicable, the firm's BCP must document the rationale for not including the element in its plan. If a firm relies on another entity for any one of the elements or any mission critical system, the firm's BCP must address this relationship.

FINRA provides the following optional tools to assist firms in in fulfilling their need to create and maintain business continuity plans (BCPs) and emergency contact person lists under FINRA Rule 4370.

Communicating with FINRA

Firms must provide FINRA with emergency contact information. In addition, if a firm is unable to contact FINRA during a significant business disruption through its usual contact, such as the District Office or direct dial number, please call the FINRA Support Center at (301) 590-6500. This number will be rerouted in the event of a business disruption at FINRA's primary call center, so that the firm will be able to reach an operator or receive recorded instructions. This information also will be posted on www.finra.org. 

In instances when data communications are disrupted, firms are responsible for retaining data until it can be transmitted to FINRA.

FINRA's Business Continuity Plan

FINRA's BCP specifies how we will respond to events that significantly disrupt our business and addresses safeguarding our employees and property; insuring data back up and recovery; restoring mission-critical systems as well as critical regulatory and operational activities; alternative communications with investors, member firms, associated persons, and other regulators; and assuring all of our constituents a prompt response to their needs. We plan to continue in business, transfer operations to alternate sites as needed, and maintain as much transparency to our constituents as possible during a disruption. FINRA's business continuity plan is updated and tested regularly, and it is provided to the SEC as part of its oversight of FINRA.

Contact OGC

FINRA's Office of General Counsel (OGC) staff provides broker-dealers, attorneys, registered representatives, investors and other interested parties with interpretative guidance relating to FINRA’s rules. Please see Interpreting the Rules for more information.

OGC staff contacts:
Kosha Dalal and Jeanette Wingler
FINRA, OGC
1700 K Street, NW
Washington, DC 20006
(202) 728-8000
 

  • Regulatory Notice 21-44
    Business Continuity Planning and Lessons From the COVID-19 Pandemic
    12/23/2021
  • Regulatory Notice 21-29
    FINRA Reminds Firms of their Supervisory Obligations Related to Outsourcing to Third-Party Vendors
    08/13/2021
  • Regulatory Notice 20-42
    FINRA Seeks Comment on Lessons From the COVID-19 Pandemic
    12/16/2020
  • Information Notice – 3/26/20
    Cybersecurity Alert: Measures to Consider as Firms Respond to the Coronavirus Pandemic (COVID-19)
    03/26/2020
  • Regulatory Notice 20-08
    Pandemic-Related Business Continuity Planning, Guidance and Regulatory Relief
    03/09/2020
  • Regulatory Notice 19-06
    FINRA Requests Comment on the Effectiveness and Efficiency of Its Rule on Business Continuity Plans and Emergency Contact Information
    02/25/2019
  • Regulatory Notice 18-09
    FINRA Updates Designation Criteria to Require Firms Reporting U.S. Treasury Securities to TRACE to Participate in FINRA's Business Continuity/Disaster Recovery Testing
    03/07/2018
  • Regulatory Notice 17-27
    Guidance to Members Affected by Hurricane Harvey
    08/30/2017
  • Regulatory Notice 13-25
    FINRA, the SEC and CFTC Issue Joint Advisory on Business Continuity Planning
    08/16/2013
  • Regulatory Notice 12-53
    FINRA Waives Certain Trade Reporting and Compliance Engine (TRACE) Late Trade Reporting Fees in Connection With Hurricane Sandy
    12/03/2012
  • Regulatory Notice 12-45
    Guidance to Members Affected by Hurricane Sandy
    10/30/2012
  • Information Notice - 8/28/12
    Guidance for Firms Potentially Affected by Hurricane Isaac
    08/28/2012
  • Regulatory Notice 09-60
    SEC Approval and Effective Dates for New Consolidated FINRA Rules
    10/15/2009
  • Regulatory Notice 09-59
    FINRA Provides Guidance on Pandemic Preparedness
    10/12/2009
  • Regulatory Notice 07-49
    Guidance for Firms Affected by the California Wildfires
    10/25/2007
  • Notice to Members 06-74
    Member Business Continuity Experiences regarding Hurricanes Katrina and Rita
    12/29/2006
  • Notice to Members 06-31
    NASD Requests Comment on Regulatory Relief that Should Be Granted in Response to a Possible Pandemic or Other Major Business Disruption
    06/28/2006
  • Notice to Members 05-57
    Guidance to Members Affected by Hurricane Katrina
    09/02/2005
  • Notice to Members 04-37
    SEC Approves Rules Requiring Members to Create Business Continuity Plans and Provide Emergency Contact Information
    05/05/2004
  • Notice to Members 02-23
    The NASD Seeks Comment On Proposed Rules Relating To Member Firm Business Continuity Plans And Emergency Contact Information
    04/10/2002
  • Guidance
    Cybersecurity and Technology Management
    The Cybersecurity and Technology Management topic of the 2024 FINRA Annual Regulatory Oversight Report (the Report) informs member firms’ compliance programs by providing annual insights from FINRA’s ongoing regulatory operations, including (1) regulatory obligations and related considerations, (2) findings and effective practices, and (3) additional resources.
    January 09, 2024
  • Media Center
    Preparing for the Unexpected: The Ins and Outs and the Value of Succession Planning
    Succession planning is important not just for customers and representatives but can even be a matter of life or death when it comes to the continued existence of a firm. On this episode, we hear how and why firms should plan for the expected and unexpected in life.
    January 24, 2023
  • Podcast
    Business in the Time of COVID-19: BCPs, Regulatory Relief & More
    The new coronavirus that causes COVID-19 has rapidly changed the way U.S. broker-dealers must conduct business as states implement various shelter-in-place and stay-at-home orders, forcing workers remote. On this episode, we talk to FINRA’s Chief Legal Officer and Head of Member Supervision to learn how FINRA is adapting its operations and providing important regulatory relief.
    March 31, 2020
  • FAQ
    Frequently Asked Questions Related to Regulatory Relief Due to the Coronavirus Pandemic

    Due to the coronavirus pandemic (COVID-19), FINRA is providing temporary relief for member firms from rules and requirements in the Frequently Asked Questions below. The relief provided does not extend beyond the identified rules and requirements. FINRA will continue to monitor the situation to determine whether additional guidance and relief may be appropriate. As coronavirus-related risks decrease, member firms should expect to return to meeting any regulatory obligations for which relief has been provided.

    March 24, 2020
  • Targeted Examination Letter
    Targeted Examination Letter on Business Continuity Plans
    In coordination with the SEC and the CFTC, we are conducting a review of the impact of Hurricane Sandy on firms’ operations and their ability to conduct business at a time when business continuity plans were enacted.
    November 01, 2012
  • Report / Study
    Pandemic Preparedness Survey Results
    In 2009 FINRA conducted a voluntary firm survey to determine preparedness for a pandemic in light of current events involving influenza A (H1N1). This survey continues FINRA's efforts to assist firms with business continuity planning by facilitating the exchange of information.
    October 26, 2009
  • FAQ
    Business Continuity Planning FAQ
    Frequently asked questions regarding Business Continuity Planning (BCP) and FINRA Rule 4370.
  • Compliance Tools
    Small Firm Business Continuity Plan Template
    FINRA is providing a template as an optional tool to assist small introducing firms in fulfilling their obligations under FINRA Rule 4370 (Business Continuity Plans and Emergency Contact Information).