**OCC Bulletin 2023-17 (Third-Party Risk Management):** Requires banks to ensure critical third-party services have adequate DR capabilities. - **FFIEC Business Continuity Planning Handbook:** The primary guidance for US bank DR. Requires documented BIA (Business Impact Analysis), BCP (Business Cont