Exercise Programme

An exercise programme should be created to enable demonstrable evidence of the effectiveness of the business continuity management system. Regular exercises will improve the effectiveness of the business continuity management capability.

Exercise Arrangements

Exercises can range from simple desktop arrangements to full scale responses. It is advisable to create a range of exercises to minimise disruption to the organisation, much can be learned from a simple desktop walkthrough of an incident response but more comprehensive and complex exercises should be conducted.

Exercises should be regularly scheduled and include third parties and other stakeholders as necessary.

Maintenance Arrangement

In order to maintain the effectiveness of the business continuity management system a documented programme should be established. This should ensure that it is up to date.

Any major changes may need a revision to the BIA and associated documents

Review

Reviewing the effectiveness of the BCM system should ideally be carried out by personnel not directly responsible for it. Reviews can be in the form of formal audits or informal assessments. The frequency of these reviews may be determined by internal or external requirements.

Reviews should compare the business continuity management system against current circumstances.

Document Author: Harvey Fawcett

Comments (0)

Subscribe to this comment's feed