Best practices for BCPs follow regulators’ sweep exams after Hurricane Sandy