Dr. Carsten Esbach

Secrétaire Général/Chief Operating Officer, BNP Paribas Germany

BCP is a distinguishing feature ofmodern banking

Contents

1. BNP Paribas Group

2. BNP Paribas Germany

3. Business Continuity Plans

4. Possible Incident Scenarios

5. IT Dependence / Business Indications

6. Disaster Recovery Site

7. Technical coverage

8. Network

9. Storage Area Network

10. Lotus Notes

11. Conclusion 1

BNP Paribas Group

A leading international group in global banking and financial services

One of the ten most important banks in the world due to its market capitalizationand total assets

One of the four strongest banks in the world according to S&P: AA+ rating

Present in overall Europe, significant and growing presence in the United Statesand a strong position in Asia

One of the largest global networks with a presence in more than 85 countries

161.000 employees, including 125.000 in Europe

The group is active in three core businesses:

Corporate und Investment Banking (CIB)

Asset Management & Services (AMS)

Retail Banking in its two domestic markets France and Italy as well asInternational Retail Banking and Financial Services (IRFS)

2

BNP Paribas Germany

BNP Paribas is present in Germany since 1947 and is today one of the mostimportant foreign banks in the country

The group has 2.500 employees in Germany

BNP Paribas Deutschland offers a wide range of products and services along thethree core businesses:

Corporate and Investment Banking

Asset Management and Services

International Retail Banking und Financial Services

3

BNP Paribas Germany

4

BNP Paribas Germany

BNP Paribas is one of the fastest growing financial-groups in Germany. Thenumber of employees climbed since 2004 approx. 10% per year (still increasing)

All Corporate & Investment Banking business lines increased their global revenuemore than 30 % in 2007

All 30 companies of the German DAX Index are covered by BNP Paribas inGermany

Well known for Cortal Consors: The «advising direct bank» No. 3 for personalinvestments in Germany (600.000 customers) and «Online broker of the year 2007»

5

Business Continuity Plans

In times of complex IT solutions and threats like avian flu it is a significant businessadvantage to ensure a stable and ongoing workflow

Business Continuity Plans (BCPs) are designed to provide the resumption ofoperations as quickly as possible, when a company is affected by a crisis or a businessinterruption

A well organised and tested BCP is a duty for every company who wants to fulfill theneeds of its clients and business partners under all circumstances

It must be the aim, that no client or partner has a disadvantage because of the incident.In the best case – no one gets aware of it!

In a highly competitive market BCPs are a distinguishing feature

Most of the RFPs and SLAs ask for Business Continuity Management on:

Business Continuity Plans,

Disaster Recovery-Facilities,

Periodic extended Disaster Recovery-Tests

Motivation

6

Possible Incident Scenarios

Issue with applications / hardware at main office:

Switch to application / hardware at DR-Site

Access to main office denied or limited:

Transfer staff to DR-Site, continue usage of applications /hardware located at main office

Main office completely destroyed:

Transfer staff to DR-Site, usage of applications / hardwarelocated at DR-Site

Affected by pandemic:

Split team between main office and DR-Site

7

IT Dependence / Business Indications

Businesses with high IT dependence

Payments and accounting, needing reliable and efficient systems for execution

Business lines like Equity Derivatives, needing real-time market data (stockmarket, Bloomberg, Reuters)

Advisory, needing a safe and reliable access to relevant data

Corporate and Investment Banking

BNP Paribas Securities Services is among the Top 3 players in the Germanmarket and one of the leading settlement-providers. It processed 30 milliontransactions in 2007 and had 271,1 billion € assets under custody

Needing a reliable settlement system and constant access to the German stockexchanges

Asset Management and Services

8

IT Dependence / Business Indications

Business Indications

Average Daily Payments Volumes:

2005 860 100 %

2006 2.000 232 %

2007 2.600 302 %

2008 (*) 6.000 697 %

Corporate and Investment Banking

Average Daily Settlements Volumes:

2005 50.778 100 %

2006 67.924 134 %

2007 126.076 248 %

2008 (*) 198.610 391 % (*) expected

60 % of 2007‘s total volume has been settled in the first 6 weeks of 2008.

Asset Management and Services

9

Business Continuity Plan

A dedicated BCP-Officer is responsible for BC-Management and the DR-SiteManagement. Backup Continuity is composed mainly out of the following:

Crisis Management Team

Department Coordinators

BCP Handbook

Operational Flowcharts

Emergency Cards / BCP Handouts

Awareness Trainings

BCP Tests / DR Tests

Preparation against pandemic / Storage of medical utilities

Organization

10

Disaster Recovery Site Frankfurt

Besides the global Disaster Recovery Sites in Paris and London, BNP Paribas has inFrankfurt its own local DR-Site:

100 m2 Server Area Backup Systems

2 x Office Area 200 fully equipped desks, conferencerooms, storage

Integrated in the Corporate Network, redundant connection to external serviceproviders

100 % dedicated to BNP Paribas, employees can start to work without any delay

Located at the suburb of Frankfurt, 9 km distant to the main office DR-Site in a highsecurity area, direct access to metro and expressways. Access to the DR-Site willbe available when downtown is negative effected

11

Technical coverage

Standby Systems

D-1 Backup

Cluster solutions

Hot Backup (“archive logs”)

Synchronizing (“data guard”)

Cluster solutions

Load balancing

Applications

Databases

Data Storage

Network

12

Network

FrankfurtBCP Site

FrankfurtProduction Site

London Paris

Vienna

Bremen

Munich

Provid

er B

45mb/s

Provider A1Gb/s

Provider A

2Mb/s

Provider B

2Mb/s

Provider B2Mb/s

Provider A2Mb/s

Provider A2Mb/s

Provider C45Mb/s

Provider B1Gb/s

SiSi

SiSi

SiSi

SiSi

13

Network

Data Transfers

88647474697366Tbit per year

744066610Tbit permonth

2.5211.3492091972071816Gbit per day

107.56857.5648.9378.3918.834760685Mbit perhour

1.879.887.0001.006.003.800156.182.940146.638.260154.380.30013.283.34011.977.740Bit perminute

3.916.4312.095.841325.381305.496321.62627.67424.954Bit persecond

31.331.45016.766.7302.603.0492.443.9712.573.005221.389199.629Bit persecond

1.000.000.0001.000.000.0001.000.000.00045.000.00045.000.0004.000.0004.000.000

possiblebandwidth(Bit/s)

GBW-->FRI 3GBW-->FRI 2GBW-->FRI 1ParisLondonMunichBremen

14

SAN - Storage Area Network

Architecture

15

SAN - Storage Area Network

SAN DB Redundancy

16

Lotus Notes

Domino Cluster I

Mail Server 1

Primary Location Backup Location

LAN Connection

Domino Replication

Mail Server 2

Archive Server 2Archive Server 1

Load Balancing

User Desks

17

Conclusion

Disasters of different kinds and sizes are just around the corner. Younger history hasshown that the world and the markets can turn upside down from one moment toanother.

A well organised and tested BCP can:

raise the awareness for crisis and risks before the worst case happens

minimize the risk to lose data and delay business

avoid IT failures and strengthen the network

serve the needs and expectations of the clients - financial business is based onconfidence, reliability, reactivity and security

reduce possible financial impact

make the difference between competitors

BCP - A distinguishing feature of modern banking

BCP – What for?

18