CUSTODY

Recovery Plan

1. Purpose

This plan has been prepared in order to ensure a rapid, effective, and systematic response to disaster scenarios that may occur in the information systems, critical business applications, and technological infrastructure of Paribu Kripto Varlık Saklama Kuruluşu A.Ş. (hereinafter referred to as "Paribu Custody").

The plan aims to minimize service disruptions that may arise as a result of extraordinary events such as natural disasters, cyberattacks, human errors, technical failures, and supplier interruptions, and to ensure that services are restored within acceptable timeframes.

In addition, the plan:

  • Supports the continuity of Paribu Custody operations,
  • Ensures the security of customer information and assets,
  • Facilitates the establishment of a structure compliant with applicable legislation,
  • Supports the business continuity infrastructure in an integrated manner with risk management strategies.

2. Scope and Legal Basis

This plan is applicable to all information systems, crypto assets, technical infrastructure, and business units of Paribu Custody.

3. Risk Assessment and Business Impact Analysis

A risk assessment is conducted in order to analyze the potential impacts of disasters on Paribu Custody's information systems, business processes, and operational assets, and to address business interruptions that may arise in the event that such risks materialize.

4. Recovery Strategies

Recovery strategies to be implemented in order to ensure the continuity of critical business processes in disaster situations are structured in accordance with the type of incident, its scope of impact, and Paribu Custody's predefined recovery objectives (RTO, RPO).

5. Testing and Drills

In order to ensure the operability and effectiveness of the Recovery Plan, testing and drill activities are carried out at regular intervals. These activities are conducted in order to assess the applicability of recovery scenarios under real conditions, measure the preparedness level of teams, and identify areas of the plan that require improvement.

6. Review

The adequacy and currency of the Recovery Plan shall be reviewed on a regular basis.