Business Continuity

1. Business Continuity Middle East Conference 2012 • Johan Limborgh, Support Duty manager • Imran MohsinMirza, Senior Technical Sales Expert

2. Agenda Business continuity @ SWIFT Best Practice resilient setup Connectivity resilience Database resilience

3. Business Continuity Plan • Objective “enable your organisation to survive a disaster andto resume normal business in the shortest time” • Business Continuity Plan (BCP) or Contingency Plan • process of analysis, development, documentation, implementation, testing of procedures ... • Disaster Recovery • subset of BCP, covers infrastructure / operations

4. What is Business Continuity, Incident & Crisis management ?

5. Business Continuity, Incident & Crisis management @ SWIFT

6. Business Continuity @ SWIFTWhy? • To practice & enhance readiness to ensure Business continues regardless • To update & improve business continuity plans (per site), recovery plans (per department/function) and system recovery procedures (per system/service) • To continuously improve SWIFT’s resilience approach

7. Business Continuity @ SWIFTHow? Plan & Exercise! • Simulation Support exercises (scope end to end) • Site failure & recovery of critical functions • External event: staff safety and contingency (pandemic flu, catastrophic risk) • Service continuity exercises (scope system resilience) • Component failure and take over • Community tests (includes you) • Cold start exercise (DRI): annual, invitation to Premium customers • Global OPC recovery: annual, open for all customers • SWIFT Crisis Coordination and Communication (SC3): every 3 year - industry group at business level (includes board and CEO)

8. 4 level joint management and escalation process Operational Helpdesk Operational Manager Incident Manager Executive Customer Level 1 Level 2 Level 3 Level 4 Command Centre Manager SWIFT Crisis Executive Technical Team SWIFT Duty manager SWIFT 0’ 15’ 30’ 90’ 24*7: genericcontacts

9. Support portfolio Premium Custom Global Key Accounts, Large MIs and any customer looking for customised services Recovery timeobjective < 1 h REMOTE SUPPORT Premium Plus High volume customers and MIs < 2 h Premium Service Bureaus & branches of Premium Plus customers < 4 h Standard PlusLow and mid volume < 6 h Standard Alliance Lite 200 10,000 40,000 300,000 Messages per day

10. Support package features Standard Standard Plus Premium Premium Plus Premium Custom Call & problem management Highly customised Bespoke contracts Online supportPhone upgrade Unlimited phoneaccess Incident and crisis mgt SMS notification Priority handling mgt escalation Monitoring Connectivity andmessagingPhone alerting Managed connectivity Reporting Incident reporting on swift.com Support analysis Availability Preventive Health check Troubleshooting training Business Continuity testsOperational Monitoring tool Newsletters Operationalaccount management Configurationbrowser Service Manager Named contactCase review Onsite support Emergency / consultancy On request for blocking problems 10 Products Embedded Supportability

11. Remote Support • Troubleshoot technical issues • Reduce incident-handling time • Upload files and data • Avoid travel costs • And more ! You Own It, You Control It!

12. Remote Support 3,000 EUR per location/year Real-time problemsolver A secure and efficient way to diagnose and troubleshoot your problems - Secure - Faster resolution - No software installation - Less contact shifts Service build on « top » of Remote Support (*) depending on your configuration as of 1,750 EUR/day Remotely upgrading your environment to release 7.0 The SWIFT Remote Support ultimately saved us time and money by resolving (in our case) an upgrade from Alliance 6 to 7.0. The remote supporter was fast and avoided a minimal disruption of our business operations.” “The benefits of this new service allowed for a reduced downtime since we did not have the necessary in house knowledge, it was fast and easy” R. Hoppe - IT CBAS Denmark – Carnegie Bank A/S - Efficient and effective upgrade - Low cost upgrade service - Peace of mind - SWIFT expertise (*) in order to benefitfromthese services youneed to order the Remote Support service first

13. Agenda Business continuity @ SWIFT Best Practice resilient setup Connectivity resilience Database resilience

14. Sometimes this happens… NOTHING PRIMARY host CONTINGENCY host • Alliance Entry/Access • Alliance Gateway • Alliance Entry/Access • Alliance Gateway ? ? ? VPN VPN VPN VPN

15. Resiliency principles “To minimise the impact of a technical failure on your business, you should be prepared for any disaster that might arise.” • Prioritise for High probability - High impact risks • Fast recovery. Availability. Reliability. • Remove Single Points Of Failure for hardware, software, network, site, procedures, people • SWIFTNet infrastructure at customer premises: VPN

16. Best Practice resilient setupSmall FIN configuration – Single host Prime/Backup site Contingency site • Alliance Entry/Access • Alliance Gateway • Alliance Entry/Access • Alliance Gateway • Alliance Entry/Access • Alliance Gateway Messages flow connected to secondary Gateway with automatic* failover mechanism. *Except on Entry for InterAct/FileAct. DR host PRIMARY host BACKUP host or or Support for Alliance Access and Gateway Configuration Replication between systems VPN VPN VPN VPN -Bronze (ISP, ISP) -Silver (LL, ISP) -Bronze -Silver Database Recovery feature supporting recovery on the standby Access from replicated database 16

17. Best Practice resilient setupSmall FIN configuration – Multi host Prime/Backup site Contingency site PRIMARY host BACKUP host DR host • Alliance Entry/Access • Alliance Entry/Access • Alliance Entry/Access DMZ DMZ • Alliance Gateway • Alliance Gateway • Alliance Gateway RAHA RAHA RAHA VPN VPN VPN VPN -Bronze (ISP, ISP) -Silver (LL, ISP) -Bronze -Silver 17

18. Resiliency Best Practices • Failover procedures • HSM Resilience • PKI resilience • Certificate renewal • SO access to secondary SNL • Failover routes • Application data to restore

19. Agenda Business continuity @ SWIFT Best Practice resilient setup Connectivity resilience Database resilience

20. Legend: Primary route(s) Backup route Connectivity Resilience without RAHA Prime Contingency Back office must failover to contingency Alliance Access Back office application • Alliance Entry/Access • Alliance Gateway • Alliance Entry/Access • Alliance Gateway • Loss of in-flight transactions, retrieval costs and • reconciliation PRIMARY host DR host VPN VPN VPN VPN

21. Alliance Gateway license simplification • Starter Set license became Gateway license on 01/01/2011 • 3 production /test/contingency systems allowed instead of 1 • All Gateway license options can be added • Only a re-license on Gateway is required • Remote API Host Adapter RAHA offers remote access to applications that link to SWIFTNet Link • Automatic failover to backup Gateway • DMZ setup possible

22. Legend: Primary route(s) Backup route Connectivity ResilienceWith RAHA – Single host Prime Contingency Back office application • FIN: Automatic failover of LT to backup Gateway. • No loss of in-flight messages. • Alliance Entry/Access • Alliance Gateway • Alliance Entry/Access • Alliance Gateway PRIMARY host DR host RAHA VPN VPN VPN VPN • SnFInterAct and FileAct: Automatic failover to backup Gateway. • On Access only

23. Very easy to implement • No change in hardware, no software installation • Purchase RAHA license • Relicense Alliance Gateway • Online passwords • R7 easy Relicensing GUI • Configure Entry/Access with • Backup connection • Assign secondary connection to LT (Entry/Access), SnF Emission/Reception profile (Access only) • No need to install RA on R7! • Implement when migrated to R7

24. Legend: Primary route(s) Backup route Connectivity Resilience With RAHA – Multi host Prime Contingency Back office application CONTINGENCY host PRIMARY host Messaging interface Messaging interface • Alliance Entry/Access • Alliance Entry/Access DMZ DMZ RAHA • Alliance Gateway Communication interface Communication interface • Alliance Gateway VPN VPN VPN VPN

25. Alliance Lite2 as Emergency Service A backup connectivity to your private infrastructure Private Infra Alliance Lite2 Alliance Lite2 as cold backup AutoC MV-SIPN HSM AA/AE AA Optional: MV-SIPN Internet @ Browser Only available for Alliance Access and Entry customers

26. Agenda Business continuity @ SWIFT Best Practice resilient setup Connectivity resilience Database resilience

27. What is Database Recovery? Soft ware REDO logs DB Recovery Recoverfromanydatabasefailure without message loss. Easy and fast. Backup Disk Mirror Disk Database Recovery option

28. Database Recovery and synch disk replication Primary Contingency Soft ware Soft ware Synchronous Disk Replication REDO logs REDO logs DB DB Recovery only required if DB corrupt, full recovery Backup Disk Backup Disk Mirror Disk Mirror Disk Database Recovery option Database Recovery option

29. Database Recovery and asynch disk replication Primary Contingency Soft ware Soft ware Asynchronous Disk Replication Production Site Loss REDO logs REDO logs DB DB Recovery always required, up to last valid transaction Backup Disk Backup Disk Mirror Disk Mirror Disk Database Recovery option Database Recovery option

30. Database Recovery Benefits • Full content recovery up to the last committed state • Native feature • Based on Industry proven technology • Single command to recover • Complement to Mirroring or Cluster options • Supported and qualified by SWIFT • Further enhanced with release 7.0 to support asynchronous data replication Backup Disk Mirror Disk Database Recovery option

31. Thank you!