Skip to content
Contact us

Disaster Recovery Services for Financial Institutions: Protecting Critical Data

Picture of William Tygart

This industry report provides a comprehensive overview of disaster recovery services for financial institutions, emphasizing the importance of protecting critical data in today's technology-driven world. Financial institutions rely heavily on their IT infrastructure, exposing them to various risks, including natural disasters, cyberattacks, and system failures. A robust disaster recovery plan is crucial to ensure business continuity, protect critical data, and maintain regulatory compliance. This report explores the regulatory landscape, types of disasters, available disaster recovery services, best practices, case studies, costs and benefits, and the latest trends in disaster recovery for financial institutions.

Regulatory Requirements for Disaster Recovery in the Financial Industry

Financial institutions operate under strict regulations, and disaster recovery planning is no exception. Several regulatory bodies and legislation mandate specific requirements to ensure operational continuity and data protection in a disaster. These regulations are interconnected, demanding a holistic approach to compliance1.

Financial Reporting and Operational Continuity:

  • Sarbanes-Oxley Act (SOX) 1: SOX holds corporate officers responsible for business continuity and requires publicly traded U.S. companies to implement robust internal controls, including disaster recovery plans, to ensure accurate and reliable financial reporting.
  • Federal Financial Institutions Examination Council (FFIEC) 1: FFIEC mandates demonstrable business continuity plans for federally chartered financial institutions to ensure prompt fund availability and data security.
  • Securities and Exchange Commission (SEC) 1: SEC regulations require maintaining transaction histories for all electronic securities transactions and having backup power for continuous operation.

Business Continuity Planning and Data Protection:

  • Financial Industry Regulatory Authority (FINRA) Rule 4370 1: This rule applies to all FINRA members, requiring them to create and maintain business continuity plans (BCPs) tailored to their size and needs. These plans must include data backup and recovery, mission-critical systems recovery, alternate communication channels, and regulatory reporting procedures. While providing a framework, FINRA Rule 4370 offers flexibility, allowing firms to adapt their BCPs to their specific circumstances and operational scale3.
  • Health Insurance Portability and Accountability Act (HIPAA) 1: HIPAA impacts financial institutions handling protected health information. It requires covered entities to establish and implement procedures for data backup, disaster recovery, emergency mode operation, and testing and revision of contingency plans. These procedures ensure the confidentiality, integrity, and availability of protected health information, even during emergencies.

Federal Response Planning and Data Security:

  • Federal Emergency Management Agency (FEMA) 1: FEMA provides guidance on federal response planning, requiring agency heads to formally plan for essential operations continuity and maintain written business continuity documents.
  • Federal Information Security Management Act (FISMA) 2002 1: FISMA emphasizes data security and requires electronic data availability during crises, highlighting disaster recovery planning's importance.

Assembling a Comprehensive Disaster Recovery Plan:

A comprehensive disaster recovery plan requires a collaborative approach, involving various stakeholders and departments within the financial institution4. This collaborative effort ensures that all critical aspects of the business are considered and addressed in the plan. The plan should include three key steps:

  1. Identify potential risks: This involves a thorough assessment of potential threats and vulnerabilities, including natural disasters, cyberattacks, hardware failures, and human errors.
  2. Establish recovery objectives: Define the desired outcomes of the recovery process, such as minimizing downtime, preserving data integrity, and ensuring regulatory compliance.
  3. Define recovery procedures: This includes detailed instructions for responding to different disaster scenarios, outlining roles and responsibilities, required tools and resources, and monitoring and evaluation procedures.

In addition to these specific regulations, financial institutions should consider industry best practices and international standards like ISO 27001 or NIST SP 800-34, which offer guidelines for IT disaster recovery2. These standards, while not legally binding, provide a framework for developing robust and compliant disaster recovery strategies.

Types of Disasters Financial Institutions Need to Be Prepared For

Financial institutions must be prepared for a wide range of disasters that could disrupt operations and compromise critical data. These disasters can be broadly categorized as:

  • Natural Disasters: These include hurricanes, floods, earthquakes, wildfires, and winter storms5. Natural disasters can cause physical damage to facilities, disrupt power and communication networks, and lead to data loss. For example, Hurricane Harvey in 2017 damaged several bank facilities8. The increasing frequency and severity of such events pose a significant risk to financial institutions' infrastructure and operations6.
  • Cyberattacks: Cyberattacks, including ransomware, phishing scams, denial-of-service attacks, and data breaches, are a growing threat5. They can compromise customer data, disrupt online services, and damage the institution's reputation.
  • Hardware and Software Failures: Hardware failures, such as server crashes and power outages, can disrupt critical systems and lead to data loss4. Similarly, software failures, including application crashes and bugs, can disrupt operations.
  • Human Errors: Accidental data deletion, misconfigurations, and negligence can also cause data loss and operational disruptions10.
  • Financial Crisis: Events like bank runs can challenge institutions8. During such events, customer behavior can be unpredictable, requiring plans to manage large-scale withdrawals and maintain order.

Understanding Operational Assets:

When building a disaster recovery plan, financial institutions must understand their operational assets11. These assets include:

  • Hardware: Computers, mobile phones, and other devices used by employees.
  • Software: Banking applications used by employees and customers, such as digital banking platforms and loan servicing software.
  • Cloud Applications: Critical cloud-based applications.
  • Network and Internet: Secure internet access, APIs, external connections, and electronic data interchange.

Financial Preparedness for Individuals and Families:

Financial institutions should also educate their customers about the importance of financial preparedness in case of natural disasters12. This includes encouraging customers to:

  • Keep good records of their belongings and important documents, storing them safely both physically and virtually6.
  • Maintain a certain amount of liquid assets, such as a money market account, to cover expenses in the immediate aftermath of a disaster6.

Different Types of Disaster Recovery Services Available for Financial Institutions

To effectively address the diverse threats mentioned above, financial institutions can choose from a variety of disaster recovery services designed to protect critical data and ensure business continuity. These services can be categorized as:

  • Data Center Disaster Recovery 13: This involves replicating and hosting critical IT infrastructure components in a secondary data center or colocation facility. This strategy typically includes backups, redundant systems, and failover mechanisms to ensure continuous operation if the primary data center is unavailable.
  • Network Disaster Recovery 13: This focuses on restoring network services and connectivity in the event of a disaster. It includes establishing backup network connections, redundant network devices, and alternative communication channels to ensure continued communication and data access.
  • Virtualized Disaster Recovery 13: This involves replicating workloads in a secondary location or cloud environment using virtualization technology. Virtualized disaster recovery offers flexibility, ease of implementation, and faster recovery times due to the smaller IT footprint of virtualized workloads.
  • Cloud Disaster Recovery 13: This involves hosting disaster recovery systems in a cloud environment, leveraging the scalability, flexibility, and cost-effectiveness of cloud services. Cloud disaster recovery goes beyond simple cloud backup and requires configuring automatic workload failover to the DR cloud platform for immediate recovery. The shift towards cloud-based disaster recovery solutions is a significant trend, offering benefits like scalability, cost-effectiveness, and faster recovery times13.
  • Disaster Recovery as a Service (DRaaS) 13: DRaaS is a cloud-based service where a third-party provider replicates and hosts an organization's virtual and physical servers on their infrastructure. The DRaaS provider is responsible for implementing the disaster recovery plan during a crisis based on a service-level agreement. This option offers a cost-effective and efficient way to implement disaster recovery without managing a secondary data center.

Key Considerations When Choosing Disaster Recovery Software:

Before choosing disaster recovery software, financial institutions should consider several key factors: 13

  • Define DR objectives: Clearly define the recovery time objective (RTO) and recovery point objective (RPO) for critical systems and applications.
  • Understand replication options: Evaluate different data replication options, such as application-level, guest operating system level, SAN or LUN level, and hypervisor level, and choose the one that best suits their needs.

The "4R" Method for Disaster Recovery:

Financial institutions should consider the "4R" method when creating a disaster recovery plan: 9

  • Recovery Time Objective (RTO): The maximum acceptable downtime for a system or application before normal operations must resume.
  • Recovery Point Objective (RPO): The maximum acceptable amount of data loss measured in time.
  • Data Replication: Copying data from one location to another to ensure backup availability in a disaster.
  • Recurring Testing: Regularly testing the disaster recovery plan to ensure it works as intended.

Threat Awareness and DRP Creation:

A disaster recovery plan (DRP) is an essential part of any financial institution's business continuity plan15. Creating a DRP involves several steps:

  • Threat awareness: Assess systems to identify potential risks and mitigation strategies.
  • Risk assessment: Evaluate infrastructure to identify vulnerable departments or facilities.
  • Contingency planning: Develop plans for employees who may be out of work due to a disaster.
  • Preventative measures: Implement measures like firewalls and antimalware software to reduce the risk of disasters.

Best Practices for Protecting Critical Data in a Disaster Recovery Scenario

Implementing best practices for disaster recovery is crucial for financial institutions to ensure the effectiveness of their plans and minimize the impact of disasters. Some of the key best practices include:

  • Conduct a Comprehensive Risk Assessment 10: Identify potential threats and vulnerabilities, assess their likelihood and potential impact, and prioritize them based on their criticality. This includes considering natural disasters, cyberattacks, hardware failures, and human errors.
  • Establish Well-Defined RTO and RPO 10: Define the maximum acceptable downtime (RTO) and data loss (RPO) for critical systems and applications. High-priority systems should have shorter RTOs and RPOs to ensure rapid recovery.
  • Prioritize Data Redundancy and Offsite Backups 16: Implement regular, automated backups of critical data and store them offsite, either in a secondary data center, cloud storage, or with a third-party provider. Consider using the 3-2-1 backup strategy: three copies of data, on two different media, with one copy offsite.
  • Automate Failover and Testing Processes 16: Automate failover mechanisms to ensure seamless switching to backup environments with minimal human intervention. Regularly test the disaster recovery plan to ensure it is up-to-date and functional. This regular testing and updating are crucial to ensure the plan's effectiveness in the face of evolving threats and changing business environments10.
  • Develop a Clear Communication Plan 16: Establish clear communication channels and protocols for use during a disaster. Define communication roles and responsibilities, and create templates for quick dissemination of key messages to employees, customers, and stakeholders.
  • Data Security for Mission-Critical Workloads 17: Ensure data security by implementing measures like secure data centers, proper certifications, encryption of data in transit and at rest, and compliance with relevant regulations.
  • Choose the Right DR Partner 17: When selecting a DRaaS provider, consider their expertise, track record, use of proven technologies, and customer recommendations.
  • Consider Human Impact 17: When planning for disaster recovery, it's essential to consider the human impact. This includes assessing employee availability and their ability to function effectively during a disaster. Factors like stress, fatigue, and personal circumstances can affect employee performance, and the disaster recovery plan should account for these human elements.

Case Studies of Successful Disaster Recovery Implementations in the Financial Industry

In today's interconnected world, data is the lifeblood of businesses, including financial institutions. Disruptions caused by cyberattacks, system failures, or natural disasters can have severe consequences. Disaster recovery is essential to restore data and systems after such events, ensuring business continuity18. DRaaS offers a cost-effective and efficient way to implement disaster recovery strategies, eliminating the need for a secondary physical site and reducing service restoration time18.

Examining real-world examples of successful disaster recovery implementations can provide valuable insights for financial institutions. Here are a few case studies:

  • American Investment Bank 19: This bank used Cutover runbook automation software to test disaster recovery scenarios and implement a comprehensive resilience solution. They reduced event planning time by 70% and improved their disaster recovery testing and execution.
  • Fintech Firm 20: A fintech firm enhanced its IT infrastructure resilience by implementing a redundant infrastructure, cloud-based disaster recovery solution, and a crisis communication plan. This ensured operational continuity, data integrity, and regulatory compliance during an unforeseen event.
  • Financial Institution with Centralized Cloud Infrastructure 20: This institution focused on enhancing the resilience of its cloud-based infrastructure by implementing redundant servers, data storage, and contractual agreements with IT service providers to ensure service level agreements (SLAs) and response times during emergencies.
  • Delta Air Lines 21: In 2016, a power outage caused a major IT disaster for Delta Air Lines. Their robust disaster recovery plan, including redundant systems, data centers, backup power supplies, and real-time data replication, enabled them to restore operations within 48 hours.
  • Salesforce 21: In 2016, Salesforce experienced a major data center outage. Their disaster recovery strategy, with redundant systems, advanced replication techniques, and thorough data backups, allowed them to restore services within a few hours.
  • Netflix 21: In 2012, a significant Amazon Web Services (AWS) outage disrupted Netflix's services. Their comprehensive disaster recovery plan, utilizing AWS's infrastructure and multi-region deployments, enabled them to redirect traffic and restore services quickly.
  • Johnson & Johnson 21: In 2017, Johnson & Johnson faced a cyberattack. Their disaster recovery plan, including regular backups and incident response protocols, allowed them to contain the situation, restore services, and minimize the impact on their operations.

These case studies highlight the importance of learning from other organizations' experiences and adapting best practices to their specific needs and circumstances19. Each case study demonstrates how a well-defined and tested disaster recovery plan can mitigate the impact of various incidents, from natural disasters to cyberattacks.

Potential Costs and Benefits of Different Disaster Recovery Solutions

The costs and benefits of different disaster recovery solutions vary depending on the chosen approach, the size and complexity of the organization, and the specific requirements for data protection and recovery. A comprehensive cost-benefit analysis is crucial when choosing a solution, considering both direct and indirect costs and the potential benefits of minimizing downtime and data loss22.

Costs:

  • Direct Costs 22: These include expenses related to hardware, software, cloud services, and ongoing maintenance. Traditional disaster recovery solutions with a secondary data center can involve significant upfront costs for infrastructure and ongoing maintenance. Cloud-based solutions and DRaaS can reduce these costs by leveraging a pay-as-you-go model and eliminating the need for a physical secondary site.
  • Indirect Costs 22: These include the financial impact of downtime, data loss, compliance penalties, and the resources required to regain compliance. These costs can be substantial and often exceed direct expenses.

Factors Influencing Disaster Recovery Costs:

Several factors influence the cost of disaster recovery plans: 22

  • Business size and complexity: Larger organizations with more complex IT infrastructures require more extensive and sophisticated recovery solutions, leading to higher costs.
  • Risk assessment and tolerance: Organizations with a low tolerance for risk may invest more in disaster recovery to ensure continuity and data protection.
  • Recovery objectives (RTO/RPO): More stringent RTOs and RPOs require more advanced and costly solutions to minimize downtime and data loss.
  • Chosen recovery solutions: Different recovery solutions have varying costs, with cloud-based solutions and DRaaS often being more cost-effective than traditional methods.

Benefits:

  • Cost-Efficiency 23: DRaaS solutions can be more cost-effective than traditional methods by eliminating the need for a secondary site and leveraging a pay-as-you-go model.
  • Faster and More Efficient Recovery 23: DRaaS and cloud-based solutions enable faster recovery times due to automated processes and the elimination of physical travel to a secondary site.
  • Scalable Disaster Recovery 23: Cloud-based solutions offer scalability, allowing organizations to easily adjust their disaster recovery resources as their IT environment evolves.
  • Automation and Reduced Manpower Requirements 23: DRaaS solutions often include automation features, reducing the need for manual intervention and minimizing human error during recovery.
  • Increased Employee Productivity 24: A well-defined disaster recovery plan with assigned roles and responsibilities can increase employee productivity during a disaster.
  • Greater Customer Retention: By minimizing downtime and data loss, disaster recovery planning helps maintain customer trust and satisfaction.
  • Prevention, Anticipation, and Detection 25: Effective disaster recovery planning involves not only recovering from disasters but also preventing them, anticipating potential issues, and detecting threats early on. This includes measures like regular updates and backups, security audits, employee education, and implementing tools for threat monitoring and data protection.

Latest Trends and Technologies in Disaster Recovery for Financial Institutions

The field of disaster recovery is constantly evolving, with new technologies and trends emerging to address the changing needs of financial institutions. The growing importance of integrating disaster recovery planning with cybersecurity strategies is evident as cyber threats become more sophisticated26.

 

Trend/Technology

Description

Convergence of Backup with Cybersecurity

Integrating backup solutions with cybersecurity measures to strengthen defense against cyberattacks and ensure the security of backup data26.

Zero Trust Security in Backup & DR

Implementing Zero Trust security principles to verify every access request and protect backup data even in case of internal or external breaches26.

Autonomous Recovery with Continuous Data Protection (CDP)

Utilizing CDP to enable real-time backup and autonomous recovery with minimal data loss and downtime26.

Cloud-Native and Edge Computing Backup Solutions

Adopting backup solutions specifically designed for cloud environments and edge computing to ensure data protection and recovery in diverse IT landscapes26.

Data Compliance Regulations

Adhering to evolving data compliance regulations like DORA, GDPR, HIPAA, and CCPA, which mandate robust disaster recovery plans and data protection measures26.

Multi-Cloud and Hybrid Cloud Strategies

Utilizing a combination of different cloud services and providers to avoid vendor lock-in and create more resilient and flexible disaster recovery solutions27.

Ransomware Recovery Strategies

Developing specific strategies to counter ransomware attacks, including advanced backups, data encryption, and employee education27.

Enhanced Testing and Validation

Implementing more rigorous testing and validation processes to ensure the effectiveness of disaster recovery plans and identify potential weaknesses27.

Focus on Cost-Optimization and Resource Efficiency

Optimizing disaster recovery infrastructure and resource utilization through technologies like deduplication, compression, tiered storage, and automated resource management27.

Artificial Intelligence and Machine Learning (AI/ML)

Utilizing AI/ML for predictive analytics, automated recovery processes, and AI-driven decision-making during disaster scenarios10.

Increased Downtime Costs

Recognizing the increasing cost of downtime and implementing measures to minimize disruptions and ensure rapid recovery28.

Ensuring Cash Availability

Banks are implementing strategies to ensure cash availability after natural disasters, including providing access to alternative channels like ATMs, liquidity management, and rethinking approaches to storing and deploying physical cash29.

Conclusion

Disaster recovery planning is not merely a regulatory requirement but a critical aspect of business continuity for financial institutions in today's dynamic and threat-filled environment. This report has provided a comprehensive overview of the key elements involved in developing and implementing robust disaster recovery strategies.

Financial institutions must adopt a proactive approach to disaster recovery, considering the interconnectedness of various regulations, the increasing frequency of natural disasters, and the evolving sophistication of cyber threats. They should prioritize:

  • Comprehensive risk assessments: Regularly assess potential threats and vulnerabilities, including natural disasters, cyberattacks, system failures, and human errors.
  • Well-defined recovery objectives: Establish clear RTOs and RPOs for critical systems and applications, ensuring alignment with business needs and regulatory requirements.
  • Robust data protection: Implement data redundancy and offsite backups, utilizing the 3-2-1 backup strategy and considering cloud-based solutions and DRaaS for enhanced protection and faster recovery.
  • Regular testing and updating: Continuously test and update disaster recovery plans to ensure their effectiveness in the face of evolving threats and changing business environments.
  • Integration with cybersecurity: Integrate disaster recovery planning with cybersecurity strategies to address the increasing sophistication of cyberattacks and protect critical data.
  • Cost-benefit analysis: Conduct a thorough cost-benefit analysis when choosing a disaster recovery solution, considering both direct and indirect costs and the potential benefits of minimizing downtime and data loss.
  • Learning from best practices: Learn from the experiences of other organizations and adapt best practices to their specific needs and circumstances.

By embracing these recommendations and staying informed about the latest trends and technologies, financial institutions can strengthen their resilience, protect their critical data, and ensure the continuity of their operations in the face of any disruption.

Works cited

  1. Name of Organization Disaster Recovery (DR) Requirements – Industries - NCTCOG, accessed February 1, 2025, https://www.nctcog.org/getmedia/32241641-dcbe-4fbc-94b8-68ec8ac607a9/dr-requirements-industries.docx
  2. [DR] Legal and Regulatory Requirements for IT DRP Program - Crisis Management, accessed February 1, 2025, https://blog.bcm-institute.org/it-disaster-recovery/legal-and-regulatory-requirements-for-it-drp-program
  3. Business Continuity Planning (BCP) | FINRA.org, accessed February 1, 2025, https://www.finra.org/rules-guidance/key-topics/business-continuity-planning
  4. Developing Disaster Recovery Plans for Regulated Industries - TestRail, accessed February 1, 2025, https://www.testrail.com/blog/regulated-industry-disaster-recovery-plan/
  5. Prepare for emergencies | U.S. Small Business Administration, accessed February 1, 2025, https://www.sba.gov/business-guide/manage-your-business/prepare-emergencies
  6. Steps to Financially Prepare for Natural Disaster | U.S. Bank, accessed February 1, 2025, https://www.usbank.com/wealth-management/financial-perspectives/financial-planning/financial-preparedness-natural-disaster.html
  7. Natural Disaster Impact: Advice for Consumers and Business Owners | FDIC.gov, accessed February 1, 2025, https://www.fdic.gov/news/disaster/consumers
  8. Disaster Readiness Planning for Financial Institutions - INSURICA, accessed February 1, 2025, https://insurica.com/blog/disaster-readiness-planning-for-financial-institutions/
  9. Disaster Planning for Banking: Your Cyberattack Recovery Guide - Locality Bank, accessed February 1, 2025, https://localitybank.com/resources/cyberattack-recovery-guide/
  10. Best Practices for Disaster Recovery Planning in 2024 - CLDigital, accessed February 1, 2025, https://cldigital.com/blog/best-practices-for-disaster-recovery-planning-in-2024/
  11. Disaster Recovery Planning for Banks & Credit Unions - Ncontracts, accessed February 1, 2025, https://www.ncontracts.com/nsight-blog/bank-disaster-recovery-planning
  12. Be Prepared for a Financial Emergency - Ready.gov, accessed February 1, 2025, https://www.ready.gov/sites/default/files/2021-01/ready_financial-emergency_info-sheet.pdf
  13. Disaster Recovery Solutions: Top 5 Types and How to Choose - Cloudian, accessed February 1, 2025, https://cloudian.com/guides/disaster-recovery/disaster-recovery-solutions-top-5-types-and-how-to-choose/
  14. Disaster Recovery Service for Financial Institutions - Safe Systems, accessed February 1, 2025, https://www.safesystems.com/it-services-for-community-banks-and-credit-unions/disaster-recovery/
  15. Disaster Recovery Planning (DRP) for Financial Institutions - Essential Tech, accessed February 1, 2025, https://www.essentialtech.com.au/blog/disaster-recovery-planning-for-financial-institutions
  16. Building a Resilient Disaster Recovery Strategy: Best Practices for Business Continuity, accessed February 1, 2025, https://www.trigyn.com/insights/building-resilient-disaster-recovery-strategy-best-practices-business-continuity
  17. 8 Best Practices Of Disaster Recovery - StoneFly, Inc., accessed February 1, 2025, https://stonefly.com/blog/8-best-practices-of-disaster-recovery/
  18. Real-World Examples of Disaster Recovery Using AWS - InterVision Systems, accessed February 1, 2025, https://intervision.com/blog-real-world-examples-of-disaster-recovery-using-aws/
  19. Investment bank reduces IT DR planning time by 70% - Cutover, accessed February 1, 2025, https://www.cutover.com/success-stories/american-investment-bank-operational-resilience
  20. Case Study: Business Continuity Planning in Financial Services and FinTech, accessed February 1, 2025, https://www.aevitium.com/post/case-study-business-continuity-and-contingency-planning
  21. Successful IT Disaster Recovery Examples - Fixinc, accessed February 1, 2025, https://www.fixinc.io/resources/examples-successful-it-disaster-recovery
  22. Disaster Recovery Cost: 4 Key Factors & How to Reduce Your Costs - N2WS, accessed February 1, 2025, https://n2ws.com/blog/disaster-recovery-cost
  23. Five Key Benefits of Adopting Disaster Recovery as a Service (DRaaS) - VAST, accessed February 1, 2025, https://vastitservices.com/blog/five-key-benefits-of-adopting-disaster-recovery-as-a-service-draas/
  24. 4 Benefits of Disaster Recovery Planning - Evolve IP, accessed February 1, 2025, https://www.evolveip.net/blog/4-benefits-disaster-recovery-planning
  25. What is Disaster Recovery? Benefits, Use Cases, Components - Object First, accessed February 1, 2025, https://objectfirst.com/guides/data-security/what-is-disaster-recovery/
  26. BDRSuite 2025 Predictions: Top 5 Emerging Trends in Backup and Disaster Recovery, accessed February 1, 2025, https://vmblog.com/archive/2025/01/31/bdrsuite-2025-predictions-top-5-emerging-trends-in-backup-and-disaster-recovery.aspx
  27. Cloud Disaster Recovery Services: Top Trends in 2024 - Trilio, accessed February 1, 2025, https://trilio.io/resources/cloud-disaster-recovery-services/
  28. 25 Disaster Recovery Statistics That Prove Every Business Needs a Plan - Invenio IT, accessed February 1, 2025, https://invenioit.com/continuity/disaster-recovery-statistics/
  29. How Will Banks Ensure Cash Availability in the Wake of Natural Disasters?, accessed February 1, 2025, https://thefinancialbrand.com/news/banking-trends-strategies/how-will-banks-ensure-cash-availability-in-the-wake-of-natural-disasters-182564