Business Continuity Plan
MetLife, Inc. together with each of its subsidiaries and affiliates, including its broker dealer affiliates, (collectively "MetLife") is committed to safeguarding the interests of our clients and customers in the event of an emergency or significant business disruption ("SBD"). MetLife’s comprehensive business continuity strategy is designed to enable MetLife to meet its existing obligations to its clients and customers in the event of an emergency or SBD by safeguarding employees’ lives and firm property, making a financial and operational assessment, quickly recovering and resuming operations, protecting all of MetLife’s books and records, and allowing customers to transact business.
MetLife has a documented corporate policy requiring each Business Unit to develop a business continuity plan (hereinafter "Business Continuity Plan"). Pursuant to this policy, MetLife’s IT Risk and Security, Business Continuity Management department has the full-time responsibility of coordinating the development, testing and maintenance of all MetLife Business Continuity Plans. Business Continuity Management also manages contracts with recovery services vendors and is responsible for management reporting on all aspects of continuity. A formal process that includes a continuous review of internal controls enforces the corporate policy on continuity.
Business Continuity Plans have been developed, tested and approved by management for all MetLife business locations and production IT systems and applications. The plans reside in a common, best-of-breed database and are routinely updated by business units and Business Continuity Management staff. The database is replicated between two sites that are several hundred miles apart. Business Impact Analyses are used to keep the Business Continuity Plans aligned with business requirements.
Recovery resources are identified in advance and are obtained from several sources. These resources exist either within MetLife’s capabilities or are obtained from recovery services vendors under contract.
Local crisis management teams are in place in all MetLife locations. These local crisis teams are charged with recording and managing any potential or actual crisis at the site from the time a situation occurs to the resolution of the incident and resumption of normal business operations.
MetLife’s Business Continuity Plans address advance preparations and actions to be taken in response to disruptions of various magnitudes. The Business Continuity Plans address the potential impact of varying levels of disruptions to MetLife employees, equipment, computer and telecommunications systems, and office facilities. While it is impossible to anticipate every type of disruption that could effect MetLife’s businesses, examples of the incidents covered by the Business Continuity Plans include, but are not limited to, terrorists attacks, hurricanes, fires, bomb threats, earthquakes, public transportation strikes, IT disruptions and cyber-threats.
MetLife maintains back-up systems and power supplies that allow critical computer and telecommunications systems and facility functions to be maintained in the event of minor, local disruptions. The duration of the disruption will depend on the nature and extent of the emergency or SBD.
In the event of an SBD, where it is not possible to conduct business from one of MetLife’s offices, the company has contracted with a recovery services vendor for use of a remote alternate site equipped with sufficient resources to support critical business operations. Telephone service would be re-routed to this site. MetLife’s networks and major business applications are replicated daily in a different geographical location from the company’s offices, enabling it to access these systems from the remote site should the local systems become unavailable. As required in the Business Continuity Plans, MetLife is generally prepared to restore critical business functionality at the alternate site no later than 48 hours after declaration of an SBD. Other employees have been designated to work from home during periods of major disruptions.
The MetLife’s Business Continuity Plans are reviewed as necessary, and at least annually, to ensure they account for technology, business and regulatory changes, operations, structure or location. The Business Continuity Plans are subject to change, and material changes will be updated promptly on the MetLife public website and all affiliates’ websites. You may obtain a current written copy of this notice by contacting a MetLife representative or writing to us at:
One MetLife Plaza
Long Island City, New York 11101
Attn: Information Technology Risk & Compliance