To ensure that the BCMS is effective a monitoring and review process shall be implemented.

Broadly split into 2 elements

Internal Audit

If the organisation already has an internal audit function it may make sense to utilise the processes and procedures already being used. Even personnel not specifically trained in business continuity may be used as internal audit should be an objective process.

Management Review

Managemengt review would ordinarily be an annual exercise involving review of internal and external audit activity, resources and other inputs and outputs. The overal objective of the management review is to determine if the the BCMS continues to meet the organisations needs. A management review may also take place in light of significant organisational change.

Document Author: Harvey Fawcett

Comments (0)

Subscribe to this comment's feed