|
|
BS25999 is a standard that establishes the process, principles and terminology of business continuity management.
|
|
|
BS 25999-1:2006 has its own list of terms and definitions that pertain to the standard itself and users should pay close attention to them.
Like any industry, business continuity management has its own set of jargon, terms, definitions and acronyms. Read on for a consolidated glossary and details of where to find more
|
|
|
There are many definitions of business continuity and business continuity management but they all boil down to a similar desired outcome.
|
|
|
The Business Continuity Management Policy is a crucial document that defines both the setup and ongoing management of the Business Continuity Management capability. The BCM policy is not a static document and should be reviewed regularly as circumstances and needs change
|
|
|
BCM Programme Management sits at the core of the business continuity process. It describes the process by which an organisation can arrive at and continue to meet their business continuity goals.
|
|
|
Arguably the most important step in a Business Continuity Management programme is to understand the organisation, its products, services, resources, facilities, suppliers, customers, other stakeholders and their interdependencies.
|
|
|
When the organisation, its goals, strategies, components, facilities, technology and risks are fully known, the recovery objectives determined and residual risks accepted i.e. the organisation is understood the next stage is to decide what to do, deciding on business continuity strategy options.
|
|
|
In line with the business continuity management strategies, developing the BCM response is about getting on, creating plans and making arrangements to ensure the continuity of identified activities. It also deals with procedures for handling an incident.
|
|
|
In order to validate the business continuity arrangements a program of exercise, review and ongoing maintenance should be implemented. Organisations change and the business continuity plan must also change.
|
|
|
Business continuity, much like information security, does not exist in a vacuum. It must be embedded in the organisation at all levels.
|
|
|
BS25999 
