Business Continuity Management System (BCMS) BS 25999/ISO 22301

Why BCMS?

Implementation of BCMS is a way of saying, ‘we can recover from ‘any’ adverse situation’. The focus of business continuity is not so much in prevention, but more importantly ‘recovery’ or ‘restoration’. No one predicted 9/11, but only a few businesses survived who had business continuity.

The events may not always be magnanimous as 9/11 as many internal events within the organisation can play havoc. A formal approach therefore should combine both external as well as internal events to prepare for the worst.

What is the approach for successful
implementation and certification?

There are primarily six phases, and in each phase there can be several sub-phases:

Phase I – Business Impact Analysis (BIA)
This helps determine the scope of continuity/implementation.

Phase II – Implementation/measurement journey
through definition of policy/procedure/documentation on one hand and the implementation of the gaps on the other;

Phase III – Internal Audit
is the process of verifying successful implementation, on one hand, and the inclusion of BCM principles in business lifecycle on the other.

Phase IV – Registration body
certification. This is two stages Stage
1 – documentation, and Stage
2 – implementation verification.
Total duration of each milestone canvary depending upon the complexity ofthe scope. Talk or write to us at roadmap@coralesecure.com to know how we can take you through asuccessful journey.

What is BS 25999-2: 2007?

It is a certification standard that enables the organisation being assessed has demonstrated successful implementation of BCMS. If successfully certified, it means that the organisation has demonstrated the implementation and is ‘continually’ improving.

The standard – BS 25999 - is divided into management system controls (Clause 5 and 6) and 6 core BCMS domains (Clause 3 to 4).

• BCM Program Management
• Understanding the Organization
• Determining BCM strategy
• Developing and implementing BCM response
• Exercising, maintaining and reviewing
• Embedding BCM in the organization's culture
• Release and deployment management