Business Continuity and Payment Systems

The Bank for International Settlements definition of aeffect of operational disruptions.
payment system states; "A payment systemThose financial institutions that were significantly
consists of a set of instruments, banking proceduresconcentrated within the geographic area in New York
and, typically, interbank funds transfer systems thatCity were most affected by the devastation at the
ensure the circulation of money" ("A glossary ofWorld Trade Center. This was made worse by the
terms used in payments and settlement systems",fact that some had consolidated their staff in one or
Committee on Payment & Settlement Systems. BIS,two locations for efficiency purposes. Certain critical
Basel. March 2003).market functions, especially in the clearing and
Despite this we often associate the word "system"settlement of funds, securities, and financial
with only the technology; the bits and bites, thecontracts, depend on a small number of specialist
hardware and the software. We tend to forget thatorganizations each with their own operations in a
there is a lot more that goes into making up aconcentrated area. There were major weaknesses in
payment system.telecommunications capabilities because of these
A further problem is the user's perspective, and inconcentrations. Many firms believed they had full
the case of a bank this is often from that banksredundancy in their communications systems because
own point of view - a view that only concerns thethey had arrangements with multiple
bank itself. The outside world is seen as exogenoustelecommunications providers or because they had
to the bank's "system". This is often the view takencontracted for diverse routing, only to discover that
when considering such critical issues as disasterall of the communication lines traveled through any of
recovery and business continuity planning. What isseveral single points of failure.
often overlooked is the big picture - the users, the-There was a strong interdependence among financial
clearing system and the settlement agent.system participants irrespective of where they were
This total picture is something that was very clearlylocated.
illustrated in the effect that the events of 9/11 hadWhile financial institutions situated outside the New
on the payments system in the United StatesYork City area were affected to a much lesser
generally, but more specifically in lower Manhattan.degree than were those inside it, many felt the
The aftermath of the 9/11 events clearly illustratedeffects of the disaster. Most financial factors lost the
this - that disaster recovery and business continuityability to connect to banks, brokers and other
planning had been too focused on single localizedorganizations in lower Manhattan. This blocked their
events and assumed that all the other systemability to conduct business and establish whether
components would remain intact.transactions had been completed as anticipated.
The major lessons learned were;Some customers were affected by actions of
-Business continuity planning failed to take intoinstitutions with which they did not even do business,
account the possibility of wide-area disasters and forwhen funds or securities could not be delivered due
the major loss of or inaccessibility of critical staff.to operational problems at other institutions. The
At many organizations contingency planning hadsuspension of all commercial flights had serious
generally concentrated on problems with a singleimplications for the clearing of cheques.
building or system. Some firms maintained theirIn the post-9/11 world there is a clear understanding
backup facilities in nearby buildings, assuming that anthat the financial system has many components, and
"event" might debilitate or destroy a single facility.they all have to work. It is the big picture, not the
Very few firms planned for an emergency thatnarrow "own" view that has to be planned for.
would disrupt whole business district or city. This ledBusiness continuity planning needs to be made far
certain firms to loose access to both their main andmore robust. Revised plans should include the ability
backup facilities following 9/11 attacks. Generally firmsfor a rapid resumption of critical operations following
had also not considered the possibility thatthe loss or inaccessibility of staff in at least one
transportation of staff could be significantly disruptedmajor operating site; or following a wide-scale,
and that their ability to move personnel to anregional disruption. It is vital that all critical internal and
alternative location would become extremely difficultexternal continuity arrangements are effective and
or impossible.compatible.
-The market and geographical focus intensified the