This is a section of roles and responsibilities, 

Assist to write me an introduction to the section by highlighting on below

6.1	Board of Directors Responsibilities
The Board fulfills its business continuity planning responsibilities by setting policy, prioritizing critical business functions, allocating sufficient resources and personnel, providing oversight approving the BCM Policy, Business Continuity Plan (BCP), reviewing test results and ensuring maintenance of the current plan. 
In addition to fulfilling its responsibilities as above, the board has:
a)	established a clear risk appetite and risk management strategy governing the BCM framework;
b)	approves the BCM framework of the bank and ensures subsequent reviews are conducted at least annually;
c)	established a sound internal governance structure that provides effective oversight over the implementation of the BCM framework, consistent with the overall business strategy and risk appetite of the bank;
d)	ensures sufficient management capacity and resources, including budget and staff, are allocated to support an effective BCM framework; and
e)	instils a strong organizational culture that embeds the BCM framework in the strategy and business operations of the bank.
These responsibilities which have been delegated to the board committees, namely BRMC & BACC 
6.1.2	 BOARD RISK MANAGEMENT COMMITTEE (BRMC)
a)	Shall direct EXCO to establish a structure capable of implementing the Business Continuity Management Policy and the Pandemic Preparedness Policy.
b)	Direct the EXCO to allocate and approve sufficient resources towards developing and implementing the Business Continuity and Pandemic Response Plans.
c)	The BRMC has full delegated authority to oversee implementation of DTB’s business continuity plans in the event of the occurrence of a pandemic or other disruptive event.
d)	Direct EXCO to set the right tone from the top to guide preparedness and response measures in times of disruptions.
e)	Direct EXCO to formulate policy and or procedures for temporary or permanent transfer of authority, in the event any of the senior leadership or Board members are incapacitated.   
f)	Receive reports from the Director of Risk on the Bank’s Business Continuity and Pandemic risk as appropriate. The Director Risk shall report to BRMC on the adequacy of the BCM and Pandemic Risk Management Framework.
6.1.2	 BOARD AUDIT & COMPLIANCE COMMITTEE (BACC)
The Head of Compliance shall report on the bank’s BCM compliance with the applicable guidelines, policy, and procedure on a quarterly basis.

6.2	EXCO Additional Responsibilities
Exco are responsible for:
a)	Ensure that business continuity planning forms an integral part of the overall risk management of DTB and that business continuity processes are documented and embedded in DTB’s operations. This is enforced by the documented board approved Policy, Strategy, Plans, standards and Principles on BCM. 
b)	review the BCM framework at least annually, to ensure that it is up-to-date, effective and appropriate to the scope, nature and complexity of the operations of the bank;
c)	Define the roles, responsibilities, and authority to act in the event of a major disruption, namely: 
•	DTB overall management of the business continuity function on a day-to day basis shall be assigned to a Business Continuity Management Team (BCMT). These responsibilities are delegated to the BCM Coordinator for execution. The selection of the BCMT should be contingent upon the nature of business activities, size, complexity, and geographical location of DTB. 
•	The BCMT shall include members of the following:
i.	BCM Owner (CEO)
ii.	BCM Coordinator (COO)
iii.	Functional Department Heads (Exco)
iv.	Line Managers (As needed e.g., Physical Security)
The execution of Business Continuity Management Plans shall be undertaken by a Crisis Management Team (CMT) established for the purpose and specific to the nature of the crisis at hand as indicated in section 7.10 below.
d)	Ensure that sufficient human and financial resources are made available to provide support for Business Continuity Management
e)	Ensuring that the BCP not only considers business processes and technical aspects, but also recognizes and addresses the human element.
f)	e) Demonstrating sufficient awareness of the risks, mitigating measures and state of readiness by way of review and provision of feedback as applicable on the reports placed to Management and BACC ensuring adequate understanding of the BCM framework and that all levels of staff are well equipped to perform their roles through annual training. Ensure that the business continuity plans not only consider the business process and technical aspects, but also recognize and address the human element. The overriding consideration in formulating DTB’s business continuity plan should be for the preservation of human life. 
g)	Ensure compliance with legal and regulatory requirements for BCM.
6.3	Risk Management & Compliance Committee (RMCC)
The COO shall report to the RMCC on the effectiveness of the day-to-day business continuity and crisis management operations, overall framework, and compliance with regulatory requirements. 

6.4	Business Continuity Management Team 
The BCMT shall include members of the following:
i.	BCM Owner (CEO)
ii.	BCM Coordinator (COO)
iii.	Functional Department Heads (Exco)
iv.	Line Managers (As needed e.g. Physical Security, Corporate Communications)
•	The major roles and responsibilities of the BCMT are listed below. 
These are delegated to the BCM Coordinator for execution:
a)	To develop a Business Continuity Management plan and recommend it to RMCC through OpCo. DTB’s Business Continuity Plan shall be developed along the following five levels which reflect the business continuity management life cycle:
i.	Strategic level - Examine the organizational framework taking note of the key business stakeholders, legislative and regulatory requirements in relation to business continuity. 
ii.	Process level - Develop resumption strategies for business processes and activities. 
iii.	Resource Recovery - Ensure the deployment of appropriate resources to ensure appropriate continuity across all business processes and activities. 
iv.	Awareness and Education - Develop a Business Continuity Management culture through assessment of BCM awareness campaigns. Ensure that the BCMT is trained and that appropriate skills are in place. 
v.	Testing, Maintenance, Measurement and Audit - Ensure reliability of the Business Continuity Plan through independent review and testing.
b)	Ensure that the Business Continuity Plan (BCP) is updated to reflect the changes in DTB’s risk profile - 
the BCP must be reviewed annually, though the frequency may be modified to consider changes in the business strategy, business processes, personnel, location or technology and changes in the external business environment.
c)	Ensure the implementation of the BCP by annually conducting a BIA, an enterprise – wide risk assessment, risk management and risk monitoring to identify the mission critical activities and potential for major disruptions.  BIA’s must be signed off by the Department and Functional leadership responsible for the area on which the BIA has been completed in conjunction with the relevant Exco member for that Function or Department.
d)	Report on the status of business continuity management to the board and senior management on a regular basis, highlighting where there are identified gaps. This is through implementation status reports, incident reports, testing results and related plans for strengthening the business continuity plan. 
e)	 Ensure DTB shall also report activation/invocation of their BCP’s to the Central Bank of Kenya within 24 hours of the activation/invocation
f)	Facilitate testing of plans to ensure that crisis and recovery teams are aware of their roles and responsibilities in the event of a disruption.
g)	 Ensure response to a disruption is communicated internally and externally to applicable parties. External communication to the media should only be through consultation with the CEO and CEO’s Delegates.

6.5	Operating Committee (OPCO) Role
•	Reviews the BCM plan from the BCM coordinator and recommends to RMCC.
•	Reviews the BCM policy and procedures for recommendation to RMCC and the board thereafter.
•	Receives reports on the disaster recovery activities from the various stakeholders

6.6	Internal Audit Responsibilities
The Internal Audit Department (IAD) shall audit the effectiveness of the BCP and its periodic testing as part of their Internal Audit work and their findings / recommendations in this regard should be incorporated in their report to the BACC.  IAD shall conduct risk-based audits of the BCP at least every two years or earlier where warranted with a view to:
a)	Assess whether the plan is effective, realistic and remains relevant.
b)	Assess whether the plan adheres to the Policies and Standards established by the Board.
c)	Validate DTB’s BCM arrangements, BCP, BCM exercising and maintenance practices.
d)	Highlight key deficiencies and issues in BCM
If audit findings warrant changes to the BCP or test program, the BCM Policy and BCP(s) should be updated accordingly. Changes should follow DTB’s formal change management process in place for its policy or procedure documents. This formal change control process should ensure that the updated plans are distributed and reinforced by regular reviews of the complete plan.
6.7	All Staff
a)	Each employee shall be responsible for ensuring compliance with the BCM Policy.
b)	Each employee should be aware of his / her role in the BCP and their importance in ensuring the continuity of DTB. 
c)	Ensure personal safety and that of all other staff.
d)	Shall attend the annual BCM training and participate in the various BCM and ITDR testing exercises as applicable.
e)	Report and escalate BCM / Pandemic incidents or potential incidents.
f)	Assemble as directed by Fire Marshals &/or First Aiders and carry out recovery activities under their direction where applicable.
g)	Participate in ongoing exercises and testing.
h)	Abide by external communications guidelines & restrictions.
i)	Carry out recovery activities under direction and leadership of the Business recovery team.
6.8	Responsibility Of the Compliance Department (CD)
a)	Review COO function on compliance with the applicable guidelines, policy, and procedure. 
b)	Review that the COO has conducted staff training and ensuring a BCM compliance awareness culture
c)	Shall facilitate reporting to the BOT on all BCM and Pandemic incidences within the bank


6.9	Responsibility Of the Risk Department (RD)
a)	RD is responsible for undertaking the annual due diligence and risk assessment for Material and Non-Material Outsourced vendors and confirming the adequacy of the information obtained thereof from a BCM perspective.
b)	RD shall independently review the Business Impact and Risk Assessment undertaken by the Exco for their respective departments.
c)	RD shall be responsible for documenting the enterprise-wide Business Impact and Risk Assessment and tabling its report of findings to the RMCC and BRMC.

6.10	Crisis Management Team (CMT)
The CMT shall be responsible for groundwork functions during crisis. They shall evaluate the situation on the ground within their respective areas of operation and report back to the BCMT.  The CMT composition shall be selected on a need basis depending upon the incident. However, the permanent members of the CMT are as follows:
•	BCM Owner (CEO)
•	BCM Coordinator (COO)
•	Functional Department Heads (Exco)
•	Line Managers (As needed e.g., Physical Security)

The CMT shall be responsible for:
a)	Managing the execution of the BCP and adapting it where necessary to the unfolding situation.
b)	Document all damages and casualties that are as a result of the crisis.
c)	Dealing with any actual crisis before, during and following the incident.
d)	Manage any evacuations where necessary.
e)	Provide hands on support to BCM related functions delegated to them by the BCMT.
f)	Obtain and provide information to the BCMT during a crisis.
g)	Re-prioritize and re-allocate resources in order to expedite continuity and / or recovery.
h)	Understand and be prepared to handle all relevant potential scenarios that could result in a crisis.
i)	Developing communications messages as required for dissemination.

6.11	Business Recovery Team
This team shall be selected by the BCMT on a need basis to coordinate recovery and resumption of business after a crisis has been contained. The team may include members of the CMT, DTB staff or any other relevant persons deemed necessary in facilitating recovery and resumption of business.

The roles of the Business Recovery Team include:
a)	To take stock of and document all damages and casualties that are because of the crisis.
b)	To document the root cause and controls thereof to avoid recurrence or further harm.
c)	To document the recovery plan.
d)	To operationalize the plan for resumption as approved by the BCMT.
e)	To track the implementation of the plan and report back to the BCMT.
f)	To report to the BCMT on the recovery process. 
g)	To draft a tentative budget for recovery and submit it to the BCMT for approval where applicable.
h)	To ensure all regulatory requirements are complied with and if necessary, to ensure they are submitted on time.
i)	To ensure that all affected staff are properly attended to by human resources and if necessary given treatment and counselling following a crisis to avoid post-traumatic stress disorders.

6.12	Business Continuity Champions
The team comprises of staff selected from each department to provide support to the BCM coordinator. The role includes:
a)	Providing support in evacuation during drills and real emergencies
b)	Providing leadership support in BCP implementation for their respective departments which include but not limited to:
	Document the departmental BCP and Recovery Plans
	Update the BIA and RA annually
	Co-ordinate and document the departmental tests for all BCM, Crisis and ITDR activities.
	Update the Departmental RCSA Register on BCM incidents
c)	Escalate matters of concern with respect to the BCM or BCP to their respective Heads of Departments for further action as applicable.
d)	Ensure that the departmental BCP and Recovery Plan has been signed off by the Head of Department.