Please review and exercise the following guidelines to prepare for the unlikely event of a service disruption at Catalyst:

Introduction

Catalyst Corporate Federal Credit Union (Catalyst) is committed to providing systems and services that are reliable and readily available for member credit unions. Regular exercises and frequent enhancements to the comprehensive Business Continuity Program ensure that Catalyst can adequately respond to situations that could disrupt the quality of service to members. Use of redundant firewalls, routers, switches, and servers protect against service disruptions. Catalyst employs an alternate facility that is available for use in the event of a contingency situation. The facility consists of a "hot" site and a work area continuity (WAC) site. The hot site provides a highly secure environment with connectivity to numerous telecommunication carriers, and houses necessary network infrastructure to continue operations.

The WAC Site maintains workstations, work areas, telecommunications, and network connections necessary for operations. fiber-optic cables connect the WAC Site to the hot site to provide for optimal bandwidth access.

However, Catalyst understands that events may occur that could result in temporary disruption of services and affect the ability to communicate with members by normal methods. Timely communication regarding the nature and duration of a service disruption is very important in helping member credit unions minimize the impact on their operations. Some disruptions may require situation specific directions on how the credit union should interact with Catalyst's continuity plan in order to restore normal operations.

Therefore, these Contingency Communication Guidelines can assist member credit unions in the event of a service disruption. This document contains information for member credit unions to re-establish communications with Catalyst as soon as possible following an event that causes a service disruption.

Website Information

In the event of a service disruption, updates, special instructions, contact email addresses, and fax numbers are available in the due diligence section of the Catalyst website www.catalystcorp.org. Select the Due Diligence icon in the center of the home page, navigate to Documents and then to Contingency Communications.

In the event that www.catalystcorp.org is not accessible due to a service disruption, Catalyst maintains a Contingency Communications web site - www.catalystcorpcc.org. This site resides on a remote Internet Service Provider (ISP) for contingency purposes only. In the event of a service disruption, Catalyst will maintain this site with status updates. To access the Contingency Communication website, go to www.catalystcorpcc.org.

Communications to Credit Unions

Catalyst maintains email and fax notification systems that provide alternative contact with credit unions in the event of a service disruption. Each credit union should designate and maintain at least two Contingency Contacts for this system. For TranZact users, the credit union's TranZact Administrator can enter Contingency Contact information into TranZact using these instructions:

1. Sign on to TranZact
2. From the TranZact Main Menu, select "User Maintenance"
3. From the User Maintenance Menu, select "Notifications"
4. Select the User ID of the Contingency Contact person who should receive the contingency notification regarding a service disruption
5. Enter the person's email address and/or fax number
6. Select the person's job function or title from the drop down list
7. Select Contingency Communications/Service Disruptions box
8. Repeat steps 4 through 7 for as many individuals as should be notified

If a credit union does not use TranZact, contact a Member Service Representative (MSR) at 800.442.5763, option 1, and request that the MSR maintain the Contingency Contact information on behalf of the credit union.

Catalyst conducts quarterly exercises of the notification system with Contingency Contacts to confirm that email addresses and fax numbers remain current. Catalyst provides advance notification of the exercise date on TranZact and in the weekly Catalyst Connect newsletter.

Email Communications

The contingency email address listed below becomes active and available for member credit union use in the event of a contingency situation.

General Communications - contingency@catalystcorpcc.org

Notification of availability occurs

1. On the Contingency Communications web site www.catalystcorpcc.org
2. Through the credit union's Contingency Contact email address(es)
3. Through the credit union's Contingency Contact fax number(s)

Messages sent to the contingency email address route through a service at a remote location. Messages distribute to the appropriate recipient in a timely manner. Catalyst encourages member credit unions to send only public information to these email addresses. Do not send GLBA, confidential, or sensitive information to the contingency email address.

The contingency email address is for initial communications and may change as circumstances warrant. Visit the contingency communication website, www.catalystcorpcc.org, for updates during a service disruption.

Credit unions are encouraged to exercise at least annually with Catalyst during quarterly contingency communication exercises to confirm the email address is accessible and to verify credit union information. The email address is available for use only during an exercise or a contingency situation.

Fax Communications

During a contingency event, the contingency fax number listed below becomes active and available for member credit union use.

General Communications - fax number: 800.478.6802

Notification of availability occurs:

1. On the Contingency Communications web site www.catalystcorpcc.org and
2. Through the credit union's Contingency Contact email address(es) and/or
3. Through the credit union's Contingency Contact fax number(s)

Documents sent to this contingency fax number route through a secure service at a remote location. Notification of the incoming fax forwards automatically to Catalyst. Faxes distribute to the appropriate recipient in a timely manner.

This fax number is for initial communications and may change as circumstances warrant. Visit the contingency communication web site, www.catalystcorpcc.org, for updates during a service disruption.

Credit unions are encouraged to exercise at least annually with Catalyst during quarterly contingency exercises to confirm this fax number is accessible. This fax number is available for use only during an exercise or a contingency situation.

SAM Communications

In the event of a disruption that involves the availability of files or services, Catalyst will notify credit unions via the Service Alert Message (SAM) system.

SAM is an automated system that notifies credit union users of product specific issues.

Notification occurs via email to the credit union's Contingency Contact email address(es):

1. As an initial "Urgent" notification;
2. as "Update" notifications;
3. and, when the situation is "Resolved."

Planning and Preparation Checklist

Timely communications are critical since operating procedures may require frequent change during the process of recovering from a service disruption. The following checklist will assist with the credit union's planning and preparation for interaction with Catalyst during a contingency event:

• Become familiar with the Contingency Communications section of the public web sites: www.catalystcorp.org and www.catalystcorpcc.org 
• Incorporate Catalyst's Contingency Communications Guidelines into the credit union's Business Continuity Plans
• Update the Contingency section of TranZact with the credit union's Contingency Contact(s)
• Exercise the contingency email address at least once annually during any of Catalyst's scheduled quarterly exercises
• Exercise the contingency fax number at least once annually during any of Catalyst's scheduled quarterly exercises