Bank of Mauritius Guideline on Use of Cloud Services (2022) 10.1.v: Keep documented and regularly reviewed exit strategies with the minimum content

What does 10.1.v require?

For material cloud services the institution establishes comprehensive, well documented exit strategies and reviews them regularly so they stay adequate and effective. The exit plan covers at least an agreed process and procedures, with a reasonable timeframe, for deleting all bank and customer data; assurance from the provider through independent reports or certificates that every copy of the institution's data, backups included, has been made permanently unrecoverable and inaccessible promptly after termination; the ability to move the services to another party or back in house so service continues; and alternative solutions that keep the business running during and after transition.