1. Middle East Conference 2012 Business Continuity Johan Limborgh, Support Duty manager Imran Mohsin Mirza, Senior Technical Sales Expert

2. Agenda Best Practice resilient setup Connectivity resilience Database resilience 2 Business continuity @ SWIFT

3. Business Continuity Plan Objective “enable your organisation to survive a disaster and to resume normal business in the shortest time” Business Continuity Plan (BCP) or Contingency Plan –process of analysis, development, documentation, implementation, testing of procedures... Disaster Recovery –subset of BCP, covers infrastructure / operations 3

4. What is Business Continuity, Incident & Crisis management ? 4

5. Business Continuity, Incident & Crisis management @ SWIFT Incident recovery Crisis & reputation management Re- active Prioritise Prepare plans Test & enhance Pro- active 5

6. Business Continuity @ SWIFT Why? To practice & enhance readiness to ensure Business continues regardless To update & improve business continuity plans (per site), recovery plans (per department/function) and system recovery procedures (per system/service) To continuously improve SWIFT’s resilience approach 6

7. Business Continuity @ SWIFT How? Plan & Exercise! Simulation Support exercises (scope end to end) –Site failure & recovery of critical functions –External event: staff safety and contingency (pandemic flu, catastrophic risk) Service continuity exercises (scope system resilience) –Component failure and take over Community tests (includes you) –Cold start exercise (DRI): annual, invitation to Premium customers –Global OPC recovery: annual, open for all customers –SWIFT Crisis Coordination and Communication (SC3): every 3 year - industry group at business level (includes board and CEO) 7

8. SWIFT Crisis Executive Technical Team SWIFT Duty manager Command Centre Manager Level 1Level 2Level 3Level 4 4 level joint management and escalation process 24*7: generic contacts Operational Helpdesk Operational Manager Incident Manager Executive SWIFT Customer 0’0’15’30’90’ 8

9. Support portfolio Premium Custom Global Key Accounts, Large MIs and any customer looking for customised services Premium Plus High volume customers and MIs Premium Service Bureaus & branches of Premium Plus customers Standard Plus Low and mid volume Standard Alliance Lite Messages per day Recovery time objective 300,000 40,00020010,000 < 6 h < 4 h < 2 h < 1 h REMOTE SUPPORT 9

10. 10 Operational account management Onsite support Monitoring Call & problem management Reporting Preventive Products Connectivity and messaging Phone alerting Incident and crisis mgt SMS notification Support analysis Availability Service Manager Priority handling mgt escalation Health check Troubleshooting training Business Continuity tests Operational Monitoring tool Named contact Case review Highly customised Bespoke contracts On request for blocking problems Unlimited phone access Newsletters Premium PlusStandard PlusPremiumPremium CustomStandard Managed connectivity Emergency / consultancy Embedded Supportability Online support Phone upgrade Configuration browser Support package features Incident reporting on swift.com 10

11. Remote Support 11 Troubleshoot technical issues Reduce incident-handling time Upload files and data Avoid travel costs And more !

12. Remote Support 3,000 EUR per location/year Real-time problem solver A secure and efficient way to diagnose and troubleshoot your problems - Secure - Faster resolution - No software installation - Less contact shifts Service build on « top » of Remote Support (*) Remotely upgrading your environment to release 7.0 - Efficient and effective upgrade - Low cost upgrade service - Peace of mind - SWIFT expertise The SWIFT Remote Support ultimately saved us time and money by resolving (in our case) an upgrade from Alliance 6 to 7.0. The remote supporter was fast and avoided a minimal disruption of our business operations.” “The benefits of this new service allowed for a reduced downtime since we did not have the necessary in house knowledge, it was fast and easy” R. Hoppe - IT CBAS Denmark – Carnegie Bank A/S (*) in order to benefit from these services you need to order the Remote Support service first depending on your configuration as of 1,750 EUR/day 12

13. Agenda Best Practice resilient setup Connectivity resilience Database resilience 13 Business continuity @ SWIFT

14. Sometimes this happens… 14 VPN PRIMARY host NOTHING VPN CONTINGENCY host Alliance Entry/Access Alliance Gateway Alliance Entry/Access Alliance Gateway

15. Resiliency principles “To minimise the impact of a technical failure on your business, you should be prepared for any disaster that might arise.” Prioritise for High probability - High impact risks Fast recovery. Availability. Reliability. Remove Single Points Of Failure for hardware, software, network, site, procedures, people SWIFTNet infrastructure at customer premises: 15 VPN

16. Best Practice resilient setup Small FIN configuration – Single host 16 Prime/Backup site PRIMARY host Alliance Entry/Access Alliance Gateway BACKUP host Alliance Entry/Access Alliance Gateway VPN -Bronze (ISP, ISP) -Silver (LL, ISP) VPN Contingency site DR host Alliance Entry/Access Alliance Gateway -Bronze -Silver Messages flow connected to secondary Gateway with automatic* failover mechanism. * Except on Entry for InterAct/FileAct. Database Recovery feature supporting recovery on the standby Access from replicated database or Support for Alliance Access and Gateway Configuration Replication between systems 16

17. Best Practice resilient setup Small FIN configuration – Multi host 17 VPN Contingency site VPN Prime/Backup site PRIMARY host Alliance Entry/Access BACKUP host Alliance Gateway DR host -Bronze (ISP, ISP) -Silver (LL, ISP) -Bronze -Silver Alliance Entry/Access Alliance Gateway DMZ RAHA 17

18. Resiliency Best Practices Failover procedures HSM Resilience PKI resilience –Certificate renewal –SO access to secondary SNL Failover routes Application data to restore 18 Prepare Test Learn

19. Agenda Best Practice resilient setup Connectivity resilience Database resilience 19 Business continuity @ SWIFT

20. DR host Connectivity Resilience without RAHA 20 Legend: Primary route(s) Backup route PrimeContingency Back office application Back office must failover to contingency Alliance Access PRIMARY host Alliance Entry/Access Alliance Gateway Alliance Entry/Access Alliance Gateway VPN Loss of in-flight transactions, retrieval costs and reconciliation

21. Alliance Gateway license simplification Starter Set license became Gateway license on 01/01/2011 3 production /test/contingency systems allowed instead of 1 All Gateway license options can be added –Only a re-license on Gateway is required Remote API Host Adapter RAHA offers remote access to applications that link to SWIFTNet Link –Automatic failover to backup Gateway –DMZ setup possible 21

22. DR host PRIMARY host Alliance Entry/Access Alliance Gateway Connectivity Resilience With RAHA – Single host 22 Legend: Primary route(s) Backup route PrimeContingency Back office application Alliance Entry/Access Alliance Gateway VPN FIN: Automatic failover of LT to backup Gateway. No loss of in-flight messages. RAHA SnF InterAct and FileAct: Automatic failover to backup Gateway. On Access only

23. Very easy to implement No change in hardware, no software installation Purchase RAHA license Relicense Alliance Gateway –Online passwords –R7 easy Relicensing GUI Configure Entry/Access with –Backup connection –Assign secondary connection to LT (Entry/Access), SnF Emission/Reception profile (Access only) –No need to install RA on R7!  Implement when migrated to R7 23

24. DMZ 24 Prime DMZ Contingency Back office application Legend: Primary route(s) Backup route Connectivity Resilience With RAHA – Multi host Messaging interface Communication interface Messaging interface Communication interface CONTINGENCY host Alliance Entry/Access Alliance Gateway VPN Alliance Gateway PRIMARY host Alliance Entry/Access RAHA

25. Alliance Lite2 as Emergency Service A backup connectivity to your private infrastructure 25 MV-SIPN HSM Private Infra AA/AE Alliance Lite2 as cold backup Only available for Alliance Access and Entry customers Browser @ Internet Optional: MV-SIPN AutoC AA A LLIANCE L ITE 2

26. Agenda Best Practice resilient setup Connectivity resilience Database resilience 26 Business continuity @ SWIFT

27. What is Database Recovery? DB REDO logs Database Recovery option Mirror Disk Backup Disk Soft ware Recovery Recover from any database failure without message loss. Easy and fast. 27

28. Database Recovery and synch disk replication Database Recovery option DB REDO logs Mirror Disk Backup Disk Soft ware Database Recovery option DB REDO logs Mirror Disk Backup Disk Soft ware PrimaryContingency SynchronousDiskReplication Recovery only required if DB corrupt, full recovery 28

29. Database Recovery and asynch disk replication Database Recovery option DB REDO logs Mirror Disk Backup Disk Soft ware Database Recovery option DB REDO logs Mirror Disk Backup Disk Soft ware PrimaryContingency AsynchronousDiskReplication Production Site Loss Recovery always required, up to last valid transaction 29

30. Database Recovery Benefits Full content recovery up to the last committed state Native feature Based on Industry proven technology Single command to recover Complement to Mirroring or Cluster options Supported and qualified by SWIFT Further enhanced with release 7.0 to support asynchronous data replication 30 Database Recovery option Mirror Disk Backup Disk

31. Thank you!