BCMS implementation
Assign topic to the user
Can you perhaps give me some guidance on how to determine time (hours per day or week) for all activities relating to these areas of responsibility?
I can not find examples even within my organization so thinking surely there must be examples of a project schedule out there relating to implementing a BCMS with the use of the said expert's activities and allocated timelines?
Answer:
When you consider all the steps as a whole, you can roughly consider that the steps before the business impact analysis and risk management will take you cca 10% of the ti me, business impact analysis and risk assessment cca 30% of the time, implementation of continuity strategies, writing of BC plans, and security controls cca 50% of the time, and final activities (internal audit, management review, corrective actions) cca 10% of the time.
I recommend you to look at our Project checklist for ISO 22301 implementation (https://info.advisera.com/27001academy/free-download/project-checklist-for-iso-22301-implementation) which can give you some ideas about tasks required in a ISO 22301 implementation project.
To get an estimated duration of the whole project you can use our Duration calculator at this link: https://advisera.com/27001academy/free-tools/free-calculator-duration-of-iso-27001-iso-22301-implementation/
This material will also help you regarding ISO 22301 schedule development:
- Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/
Comment as guest or Sign in
Oct 01, 2018