site for supporting continuity of operation. Such alternative site should not use the same source of infrastructure as the main office, should have a location distant from the main office sufficient for

guidance specified by the intermediary to comply with such rules, and in any case there shall be at least sufficient and efficient operating systems as follows: (a) risk management system; (b) internal