A CCP shall have in place arrangements to ensure continuity of its critical functions based on disaster scenarios. These arrangements shall at least address the availability of adequate human resources, the maximum downtime of critical functions, and fail over and recovery to a secondary site.

A CCP shall maintain a secondary processing site capable of ensuring continuity of all critical functions of the CCP identical to the primary site. The secondary site shall have a geographical risk profile which is distinct from that of the primary site.

A CCP shall maintain or have an immediate access to a secondary business site, at least, to allow staff to ensure continuity of the service if the primary location of business is not available.

The need for additional processing sites shall be considered by the CCP, in particular if the diversity of the risk profiles of the primary and secondary sites does not provide sufficient confidence that the CCP’s business continuity objectives will be met in all scenarios.