Business Continuity Planning Policy

Overview:

A Business Continuity Planning Program has been established to ensure that all business
units have the capability to resume essential business functions following an interruption
of normal services. This Program is governed by a formal BCP Structure and work as an
ongoing process

Key elements of the Business Continuity Planning Program:

- Policies, Standards, and Guidelines that leads the process of BCP in

all areas of the Corporation.

- A Standard Methodology: Business Continuity Plans for Units and Information

Technology.

- Business Continuity Administration Structure: Roles and Responsibilities.

- Tests: Operational, Walkthroughs or Tabletop drills.

- Maintenance of Plans’ and Strategies’ documentation.

- Methods for monitoring and enforce on Business Continuity compliance.

Policy Statement:

COMPANY maintains important disaster recovery and business continuity plans that
may be used in the event of a significant business disruption. The Institution realizes the
critical nature of being able to continue material operations if an incident occurs that
could affect important business units and systems. These plans are key components in
maintaining emergency procedures, and are required by securities industry regulations.

The Institution’s business continuity plans provide for continuity of critical operations
and other activities during a variety of disruptions. They include conducting operations
from alternate sites in different locations, if necessary. These plans are designed to enable
Doral Financial Corporation to continue operations whether the disruption is firm wide,
or city wide, affecting an entire business district, region or a single building. To maintain
effective and secure plans, we keep them confidential and so do not provide specific
details in this notice. In addition, COMPANY is committed to maintaining effective
communications with its clients during business disruption. Our business continuity plans
are reviewed to ensure appropriate enhancements are implemented as technology
improves, business plans evolve, or regulatory requirements change.

It is COMPANY’s policy for Business Continuity Planning that:

1. The safety and well being of all persons on Bank premises is the highest
priority.

2. Officers and staff are empowered to take reasonable and timely steps to
protect the assets and the customers, to safeguard facilities and equipment, to
maintain service and to continue operations according to established policies.

3. Each employee is responsible for being at his/her designated or assigned work

station during emergencies. Specific people have been selected as recovery
team members and assigned to do specific recovery tasks, but COMPANY
expects all the employees to collaborate with the recovery effort.