Guidelines for Business Continuity Plan (BCP) and Disaster Recovery (DR) of Qualified RTAs (QRTAs)

Business continuity requirements mandate disaster recovery sites, stringent recovery objectives and periodic unannounced live operational drills.

SEBI requires Qualified RTAs to maintain documented Business Continuity Plans and Disaster Recovery Sites with trained staff capable of independent live operations, an Incident Response/Crisis Management Team with defined roles, and Technology Committee and Governing Board oversight. Recovery architectures must provide high availability, fault tolerance and no single point of failure, with replication strategies to meet recovery objectives and ensure minimal or zero data loss. QRTAs must conduct regular announced and unannounced DR drills, document results and root cause analyses, include drill scope in system audits, and submit their BCP-DR policy to SEBI within the prescribed timeframe.