for recovery after both short and long term disruptions in facilities, environmental support, workforce availability, and data processing equipment. Although short term outages can be protected with redundant resources and network diversity, the long term strategy must allow for total destruction of Supplier's business operations for a period of six (6) months or longer and set forth a recovery strategy. 3. Supplier's recovery objectives shall not exceed the following during any recovery period: A. Time to Full Restoration from time of disruption event: 4 hours B. Maximum Data Loss (stated in hours) from time of disruption event: 24 hours C. Percentage Reduction of Service levels: 50% during the 24 hour recovery period In the event of a change, Bank of America agrees to work with Supplier to determine a mutually agreeable date for Supplier to match the new objectives if necessary. 4. Supplier shall continue to provide service to Bank of America if Bank of America activates its contingency plan or moves to an interim site to conduct its business, including during tests of Bank of America's contingency operations plans. 5. Supplier shall furnish contingency recovery plans, contingency exercise and testing schedules annually or upon request. Supplier shall provide to Bank of America, annually, or upon request, copies of all contingency exercise final reports and shall Include, but not be limited to, disaster scenario description, exercise scope and objectives, detailed tasks, exercise issues list and remediation, and exercise results. If requested, Supplier shall allow Bank of America, at its own expense, to observe a contingency test. 6. If Supplier provides electronic interchange of data with Bank of America, Supplier shall participate, if requested, in the recovery exercise of Bank of America to validate recovery capability. 7. Supplier must provide evidence of capability to meet any applicable regulatory requirements concerning business