Академический Документы
Профессиональный Документы
Культура Документы
A leading business continuity standard Human resources management Business impact analysis and risk assessment Defining the business continuity strategy Business continuity plan Maintenance of plans and system; improvement Documentation Other related standards
Scope of the BCMS precise identification of that part of the organisation to which business continuity management is applied BCM policy defining objectives, responsibilities, etc. Human resource management Business impact analysis and risk assessment Defining business continuity strategy Business continuity plans Maintenance of plans and systems; improvement
Regular exercising and testing of plans to make staff more familiar with the plans and to check their up-to-datedness Conducting internal audits at regular intervals Management reviews to ensure that the BCMS is functioning and to make appropriate improvements Taking preventive and corrective actions to improve not only plans but also other elements of the system
Documentation
BS 25999-2 requires the following documents:
The scope of the BCM The BCM policy Specific responsibilities for the BCM Procedures for managing documents and records, procedures for corrective and preventive actions Methodology for business impact analysis, and results of the analysis Risk assessment methodology Business continuity strategy Business continuity plan which includes the incident response plan(s) and recovery plan(s) Records
The amount of documentation depends on the number of critical activities in an organisation an organisation with a small number of critical activities will also have a small amount of documentation related to business impact analysis, risk assessment and business continuity plans, while the documentation of larger organisations will be much more extensive.