Many organizations consider themselves prepared for disruption to business continuity. “Oh yes, we have a business continuity management system. We’re ready.” But are they? And are you ready for whatever lies around the next corner? What if key people leave, are poached by a rival, fall ill or die? If freak weather means you must find new premises for three weeks? If you suffer a catastrophic power failure during the working day?
Business Continuity Management (BCM) is a management process that identifies potential impacts that threaten an organisation and provides a framework for building resilience and the capability for an effective response which safeguards the interests of its key stake holders, reputation, brand and value creating activities.
You can put your trust in the internationally renowned British Standard, BS 25999, the world's first Business Continuity Management (BCM) standard developed to minimize the risks of disruptions which affect the whole organization. BS 25999 consists of two documents:
BS 25999-1 Code of Practice
BS 25999-1:2006 is a code of practice that takes the form of guidance and recommendations. It establishes the process, principles and terminology of business continuity management (BCM), providing a basis for understanding, developing and implementing business continuity within an organization and to provide confidence in business-to-business and business-to-customer dealings.
In addition, it provides a comprehensive set of controls based on BCM best practice and covers the whole BCM lifecycle.
BS 25999-2 Specification
BS 25999-2:2007 specifies requirements for establishing, implementing, operating, monitoring, reviewing, exercising, maintaining and improving a documented Business Continuity Management System (BCMS) within the context of managing an organization’s overall business risks.
The requirements specified in BS 25999-2 are generic and intended to be applicable to all organizations (or parts there of), regardless of type, size and nature of business. The extent of application of these requirements depends on the organization's operating environment and complexity.
BS 25999 has been developed by a group of world class experts representing a cross-section of industry sectors and the government to establish the process, principles and terminology of Business Continuity Management. It is is suitable for any organization, large or small, from any sector. It is particularly relevant for organizations which operate in high risk environments such as finance, telecommunications, transport and the public sector, where the ability to continue operating is paramount for the organization itself and its customers and stakeholders.
The standard is designed to keep your business going during the most challenging and unexpected circumstances. By helping to put the fundamentals of a BCM system in place, it protects your staff, preserves your reputation and provides the ability for you to continue to operate and trade.
BS 25999 provides a basis for understanding, developing and implementing business continuity within your organization and gives you confidence in business-to-business and business-to-customer dealings. It also contains a comprehensive set of controls based on BCM best practice and covers the whole BCM lifecycle.
This helped us understand our weaknesses and the problems in our organization, which led directly to changes to the existing process and strategy, leading to a more effective and robust BCMS.
Mr Kwang-Baek Seo
Deputy General Manager
Information Systems Department
Industrial Bank of Korea
See All Case Studies