Professional Documents
Culture Documents
Business Continuity Management
Business Continuity Management
Business Continuity Management
Objective
The objective of business continuity management is to counteract interruptions to business
activities and to protect critical business processes from the effects of major failures or
disasters. A business continuity management process should be implemented - is actually
required to be implemented by ISO17799 - to reduce the disruption caused by disasters and
security failures (which may be the result of, for example, natural disasters, accidents,
equipment failures, and deliberate actions) to an acceptable level through a combination of
preventative and recovery controls. The consequences of disasters, security failures and loss
of service should be analysed. Contingency plans should be developed and implemented to
ensure that business processes can be restored within the required time-scales. Such plans
should be maintained and practised to become an integral part of all other management
processes. Business continuity management should include controls to identify and reduce
risks, limit the consequences of damaging incidents, and ensure the timely resumption of
essential operations.
Model Approach
Business Continuity Management can be a complex process. This has been recognised by
the Business Continuity Instutitute who have established a 10 - point model (see Fig.1) for
developing effective business continuity management strategies:
Checklists
As a guide to progress of the BCM programme, and to ensure that each of the ten points of
the model have been comprehensively addressed, checklists have been produced for
each point, and these may be accessed by clicking on the appropriate heading
below:
Organisations are invited to use the manual (which it represents a compilation of existing best
practice, guidance and standards)to assist them in developing and implementing Business
Continuity Plans ("buyer beware") and submit any comments they may have to the ISO17799
Project Team.
The document is available in both PDF (349kb) and RTF (Zipped) (145kb) formats.
The Business Continuity Institute (BCI) has developed a Business Continuity Evaluation Tool
which assists in measuring progress with respect to the development and implementation of
Business Continuity Plans. The tool may be downloaded from the "Evaluation Criteria" web
page . Planners will find this a most useful benchmarking aid
Training
A Business Continuity Management training package is currently being compiled by the Risk
Management Team
Links
Business Continuity Institute
Globalcontinuity.com provides updates and news relating to business continuity planning and
management.