ISO/IEC 22301 Lead Implementer Certified - SC-22301LIC
In recent times it has been shown that the ability of a company to manage disruptive events is becoming fundamental to its survival. The variety of threats that can cause business disruption is growing. From cyberattacks and global pandemics to natural disasters, an organization needs a set of tools to manage itself in uncertain times.
In the past, business continuity planning used to be reserved for critical national infrastructures and large enterprises. Today, business continuity is an issue that affects virtually every organization to some degree.
HIGH LEVEL VISION
A Business Continuity Management System works with principles similar to those of other management systems. The system is based on the Plan-Do-Check-Act model.
Determine the needs of the organization and understand the rationale for business continuity plans:
What is important to continue in case of interruption
Why is it important and for whom?
What level of disruption are the organization and its stakeholders willing to accept?
Establish a framework for achieving disturbance mitigation. This may include:
Processes
Capabilities
Response structures
Check system performance and effectiveness by monitoring. In practice, this will involve checking BC's plans through various means.
Improve the system on the basis of the established measures, review the justification of the business continuity plans and their adequacy to what has been applied.
Tests or simulations of the business continuity plan.
Maintain and update organizational capabilities to support business continuity.
One of the practical challenges of the BCMS is that it comes into action infrequently. While quality management systems are implemented in the day-to-day running of the company, business continuity systems only kick in when an outage occurs. This means that more emphasis needs to be placed on:
