BCMS implementation
Assign topic to the user
Answer:
A business continuity management system (BCMS) based on ISO 22301 has an implementation framework that can be used by organizations of any industries, and the general steps are:
- Obtain management support
- Develop a project plan
- Define BCMS scope
- Define BCMS policy and objectives
- Define basic management system procedures
- Perform risk assessment and business impact analysis
- Define business continuity strategy and plans
- Implement policies and procedures and train personnel
- Perform exercises, tests, and post-incident reviews
- Perform internal audit
- Perform management review
- Proceed with corrective actions
These articles will provide you further explanation about ISO 22301:
- What is ISO 22301 https://advisera.com/27001academy/what-is-iso-22301/
- 17 steps for implementing ISO 22301 https://advisera.com/27001academy/knowledgebase/17-steps-for-implementing-iso-22301/22301/iso-22301/
Regarding implementation approaches, the most common are:
- Use you own staff to implement the BCMS
- Use a consultant to perform most of the effort to implement the BCMS
- Use a consultant only to support the staff on specific issues, leaving the organization's staff with most of the implementation effort.
Each one of them has their advantages and disadvantages. For more information, I suggest you the following materials:
- 3 strategic options to implement any ISO https://advisera.com/blog/2016/04/11/3-strategic-options-to-implement-any-iso-standard/
These materials will also help you regarding ISO 22301 implementation:
- Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/
- Diagram of ISO 22301:2012 implementation https://info.advisera.com/27001academy/free-download/diagram-of-iso-22301-implementation-process
- ISO 22301 Documentation Toolkit https://advisera.com/27001academy/iso22301-documentation-toolkit/
Comment as guest or Sign in
May 23, 2019