▷ISO22301 (BCMS)
1. General
This International Standard specifies requirements for setting up and managing an effective Business Continuity Management System (BCMS) A BCMS emphasizes the importance of Understanding, The organization’s needs and the necessity for establishing business continuity management policy and objectives implementing and operating controls and measures for managing an organization’s overall Capability to manage disruptive incidents Monitoring and reviewing the performance and Effectiveness of the BCMS and Continual improvement based on objective measurement A BCMS, like any other management system, has the following key components:
A policy
People with defined responsibilities
Management processes relating to
1) Policy
2) Planning
3) Implementation and operation
4) Performance assessment
5) Management review, and
6) Improvement
Documentation providing auditable evidence: and any business continuity management processes relevant to the organization. This International Standard applies the “Plan-Do-Check-Act” (PDCA) model to planning, establishing, implementing, operating, monitoring, reviewing, maintaining and continually improving the effectiveness of an organization’s BCMS.
This ensures a degree of consistency with other management systems standards, such as ISO 9001 quality management, ISO114001 environmental management system, ISO/IEC 27001 information security management systems, ISO/IEC 20000-1 information technology? Service management and ISO28000 specification for security management systems for the supply chain, thereby supporting consistent and integrated implantation and operation with related management systems.
Figure1 illustrates how a BCMS takes as inputs interested parties, requirements for continuity management and, through the necessary actions and processes, produces continuity outcomes (i. c. managed business continuity) that meet those requirements.
Table1 – Explanation of PCDA model
Plan (Establish):
Establish business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity in order to deliver results that align with the organizations overall policies and objectives
Do (Implement and operate):
Implement and operate the business continuity policy, controls, processes and procedures
Check (Monitor and review):
Monitor and review performance against business continuity policy and objectives, report the results to management for reviews, and determine and authorize actions for remediation and improvement
Act (Maintain and improve):
Maintain and improve the BCMS by taking corrective action, based on the results of management review and reappraising the scope of the BCMS and business continuity policy and objectives
|
|
