BS 25999 – Business Continuity Management Systems
Note: BS 25999 will be replaced by ISO 22301 during 2012
Continued operation in the event of a disruption, whether due to a major disaster or a minor incident, is a fundamental requirement for any organisation. BS 25999, the world's first standard for business continuity management (BCM), has been developed to help an organisation minimise the risk of such disruptions.
By helping to put the fundamentals of a BCM system in place, the standard is designed to keep the business going during the most challenging and unexpected circumstances – protecting staff, preserving reputation and providing the ability to continue to operate and trade.
BS 25999 has been developed by a broad-based group of world class experts representing a cross-section of industry sectors and government to establish the process, principles and terminology of business continuity management.
It provides a basis for understanding, developing and implementing business continuity within an organisation and gives confidence in business-to-business and business-to customer dealings. It also contains a comprehensive set of requirements based on BCM best practice and covers the whole BCM lifecycle.
In addition to all the usual management system requirements (e.g. policy, objectives, internal audits, management reviews etc.) it contains the following specific requirements:
- Business impact analysis.
- Risk assessment.
- Business continuity strategy.
- Business continuity plans.
- Incident management plans.