Business continuity policy and objectives
Recientemente ***, VP de ***, a solicitud nuestra, adquirió el Paquete de documentos sobre ISO 22301 español (con soporte experto) a través del pedido No. *** .Tuvimos noticias de este servicio cuando participamos en un webinar impartido por ustedes recientemente. Gracias por el buen producto que nos han suministrado. En este momento, estamos trabajando en el documento Política de Continuidad del Negocio y queremos plantearles lo siguiente:
Observamos que la plantilla (template) que proponen no contiene un postulado específico o declaración de política, como ocurre por ejemplo en el caso de la ISO 9001-2015. Asimismo, en el contenido del título Definición de objetivos de continuidad del negocio, no se definen o muestran ejemplos de estos objetivos, sino que refiere a un documento interno que no está dentro de las plantillas suministradas.
¿Pueden por favor facilitarnos modelos escritos para la declaración de política de continuidad del negocio y de objetivos específicos de continuidad del negocio?
Assign topic to the user
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more 
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
ISO 27001 DOCUMENTATION TOOLKIT
Step-by-step implementation for smaller companies.
Find out more
Recently ***, VP of ***, at our request, acquired the Spanish ISO 22301 Document Package (with expert support) through order No. ***. We heard about this service when we participated in a webinar taught by you recently. Thank you for the good product you have supplied us. At this moment, we are working on the Business Continuity Policy document and we want to ask you the following:
We note that the template they propose does not contain a specific postulate or policy statement, as is the case for example in the case of ISO 9001-2015. Likewise, in the content of the title Definition of business continuity objectives, examples of these objectives are not defined or shown, but rather refers to an internal document that is not within the templates provided.
Can you please provide us with written templates for the statement of business continuity policy and specific business continuity objectives?
Please note that ISO 22301 does not require the definition of a statement of business continuity policy (defining one would only make the document unnecessarily more complex). The content of the Business continuity policy template covers all requirements needed for compliance with the ISO 22301 standard.
Regarding the business continuity objectives, templates for them are not included in the toolkit because these depend on the specif context and business objectives of each organization, so providing generic templates applicable to all organizations would be unfeasible, and these may lead organizations on adopting objectives not aligned with their needs.
General examples of business continuity objectives may be:
- Comply with xyz law/regulation by December 31, 2017, using ISO 22301 methodology
- Enter a new market in the next 12 months because of the ISO 22301 certificate
- During 2021, improve our recovery time by 12 hours while not incurring new costs.
This article will provide you a further explanation about business continuity objectives:
- Setting the business continuity objectives in ISO 22301 https://advisera.com/27001academy/blog/2014/02/17/setting-the-business-continuity-objectives-in-iso-22301/
Comment as guest or Sign in
Nov 11, 2020