SPRING DISCOUNT
Get 30% off on toolkits, course exams, and Conformio yearly plans.
Limited-time offer – ends April 25, 2024
Use promo code:
SPRING30

Expert Advice Community

Guest

Implementing a Business Impact Analysis according ISO 22301

  Quote
Guest
Guest user Created:   Apr 03, 2017 Last commented:   Apr 03, 2017

Implementing a Business Impact Analysis according ISO 22301

Seguramente una vez un webinar colmado de profesionalismo y sabiduría.
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Apr 03, 2017

Escribo porque des afortunadamente en mi computadora no me fue posible escuchar el webinar de hoy (30/03/2017) y quisiera saber cuando sera el próximo webinar sobre el mismo tema?

(Surely a webinar full of professionalism and wisdom.
I write because fortunately on my computer I was not able to hear the webinar today (03/30/2017) and I would like to know when the next webinar will be on the same subject?)

Answer: The next webinar about implementing BIA according ISO 22301will be on November 23, but at this link you can access the recorded webinar: https://advisera.com/27001academy/es/webinar/implementing-business-impact-analysis-according-to-iso-22301-free-webinar-on-demand/

Tengo varias preguntas relacionadas con el tema de hoy:

1. Mencionar estándares internacionales que puedan ser utilizados para implementación de un sistema de gestión de continuidad de negocio?

(I have several questions related to today's topic:
1. Mention international standards that c an be used to implement a business continuity management system?)

Answer: Besides ISO 22301, ISO 22313 and NFPA1600, I suggest you to take a look at these article: Information security & business continuity standards https://advisera.com/27001academy/knowledgebase/information-security-business-continuity-standards/

These articles will provide you further explanation about other standards:
- NFPA 1600 vs. ISO 22301 – Similarities and differences https://advisera.com/27001academy/blog/2013/11/05/nfpa-1600-vs-iso-22301-similarities-and-differences/
- ISO 22301 vs. ISO 22313 https://advisera.com/27001academy/blog/2013/05/21/iso-22301-vs-iso-22313/

2. 5 elementos que deban considerarse para la implementación de un sistema de gestión de continuidad de negocio.

(5 elements that must be considered for the implementation of a business continuity management system.)

Answer: For a successful Business Continuity Management System implementation you should consider Business continuity policy, BIA, BC Strategy, BC Plans, and Exercising & testing.

3. 3 eventos que puedan afectar la continuidad de negocio de una institución bancaria?

(3 events that may affect the business continuity of a banking institution?)

Answer: Considering the interconnected banking industry today unplanned IT and telecom outages, cyberattacks and data breaches could be on many top 10 lists of disruptive events.

4. Que actividades y aspectos consideras que son necesarios considerar para la elaboración de un BIA?

(What activities and aspects do you consider necessary to consider for the development of an BIA?)

Answer: The establishment of a BIA methodology, engagement of top management, participation of processes key users, and the use of a facilitator with experience on performing business impact analysis. This is all covered in the webinar.

5. Por ejemplo si un incendio afectó las oficinas centrales de un banco un domingo por la madrugada. La situación es tan critica que ningún empleado puede ingresar al edificio. Considerando que el banco cuenta con un plan para este tipo de incidente, según tu experiencia que recursos, estrategias y actividades pueden estar detalladas en dicho plan?

(For example, if a fire affected the central offices of a bank on a Sunday in the morning. The situation is so critical that no employee can enter the building. Considering that the bank has a plan for this type of incident, according to your experience what resources, strategies and activities can be detailed in this plan?)

Answer: Considering this scenario, a strategy that should be considered is the definition of an alternative site from where people can initiate their work on Monday. Generally bank institutions have extremely short recovery times, so this alternative should be a warm or hot site. In terms of resources and activities, without further details it is not possible to define them, but generally speaking, you should consider transportation for employees, recovering of IT systems and databases, and communication with the media.

This article will provide you further explanation about Business Impact Analysis according ISO 22301:
- How to implement business impact analysis (BIA) according to ISO 22301 https://advisera.com/27001academy/knowledgebase/how-to-implement-business-impact-analysis-bia-according-to-iso-22301/

This material will also help you regarding Business Impact Analysis according ISO 22301:
- Book Becoming Resilient: The Definitive Guide to ISO 22301 Implementation https://advisera.com/books/becoming-resilient-the-definitive-guide-to-iso-22301-implementation/

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Apr 03, 2017

Apr 03, 2017

Suggested Topics

Guest user Created:   Jul 31, 2023 ISO 27001 & 22301
Replies: 1
0 0

Question about SMCA

Guest user Created:   May 06, 2022 ISO 27001 & 22301
Replies: 1
0 0

BIA process

Guest user Created:   Mar 12, 2022 ISO 27001 & 22301
Replies: 2
0 0

How to become an BIA expert