Business Resiliency Program

Corebridge Financial is committed to ensuring the smooth and continuous delivery of service to our customers while protecting the health and wellbeing of our employees and protecting our partners. 

Corebridge maintains a comprehensive business resiliency program to respond to business disruptions of varying size and scope; the program is a core component of our corporate governance structure. Our program and policies are informed by applicable industry standards and regulatory expectations and address planning for the business continuity of operations, disaster recovery of technology infrastructure, incident response and crisis management before, during and after possible disruptions.

Corebridge’s policies are supported by standards which include requirements for:

• Program governance

• Impact assessments

• Strategy and plan development 

• Testing and exercising

• Training and awareness

• Management reporting

These are reviewed at least annually and updated as needed. 

Corebridge regularly reviews and exercises its business resiliency strategy and plans in accordance with our policies and standards. The review and exercise program is designed to validate the effectiveness of, and identify improvements to, our business continuity, disaster recovery and incident response plans during a variety of business disruption scenarios. 

Activities include:

• Notification tests to personnel

• Incident management team exercises 

• Scenario-based tabletop discussions

• Disaster recovery testing of critical technology and applications

Corebridge has incident management teams at the local office, regional, and national levels to coordinate a timely response to actual or perceived threats to the organization’s people, facilities, data or reputation. These teams consist of appropriate stakeholders from across the organization’s business units and support functions. 

Monitoring of potential or actual disruptions is supported by:

• Global Security Operations Center

• Cyber Defense Center 

• Global IT Command Center

Available 24 hours a day, 7 days a week, 365 days a year.

Our Business Resiliency Program addresses potential pandemics.

Corebridge Financial can invoke plans based on guidance from:

• World Health Organization (WHO)

• U.S. Centers for Disease Control and Prevention (CDC)

• Other applicable government authorities

For security reasons, Corebridge's business resiliency strategies and plans are confidential. As a result, specific details are not provided in this notice. This notice will be updated if material changes occur.

For more information, please contact CorebridgeEnterpriseResiliency@CorebridgeFinancial.com.