Expert Advice Community

Guest

Results description

  Quote
Guest
Guest user Created:   Apr 30, 2019 Last commented:   Apr 30, 2019

Results description

I am currently completing the project plan template and need some assistance with 3.2 - Project Results. You have some great descriptions of the key documentation we will be producing as below:
0 0

Assign topic to the user

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

ISO 27001 DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Rhand Leal Apr 30, 2019

Business Continuity Management Policy – sets a basic framework for the BCMS, determines the scope and responsibilities
Business Impact Analysis (BIA) questionnaires – analysis of qualitative and quantitative impacts on business, of necessary resources, etc.
Business Continuity Strategy – defines critical activities, interdependencies, recovery time objectives, strategy for managing and ensuring business continuity, strategy for recovering resources, strategy for individual critical activities
Business Continuity Plan – a detailed description of how to respond to disasters or other business disruptions, and how to recover all critical activities
Training and Awareness Plan – a detailed overview of how employees will be trained to execute planned tasks, and how they will be made aware of the importance of business continuity
Business Continuity Exercising and Testing Plan – describes how plans will be exercised and tested with the objective of identifying necessary corrective actions and improving the plan
BCMS Maintenance and Review Plan – a detailed overview of how plans and other BCMS documents should be maintained to ensure their functioning in the case of business disruption
Post-incident Review Form – a form used for reviewing effectiveness of plans after an incident

I need to add the following for BCMS but there are no descriptions included. Do you have them?
Document and record control, Procedure for Identification of Requirements, Internal audit management, Management of Procedure for corrective and preventive actions,Form for Management Review Minutes

Answer:

You may consider these descriptions:
- Document and record control: a procedure to ensure control over creation, approval, distribution, usage and updates of documents and records used in the Business Continuity Management System (BCMS).
- Procedure for Identification of Requirements: a procedure to define the process of identification of interested parties, as well as statutory, regulatory, contractual and other requirements related to business continuity, and responsibilities for their fulfillment.
- Internal audit management: a procedure to describe all audit related activities – writing the audit program, selecting an auditor, conducting individual audits and reporting.
- Management of Procedure for corrective and preventive actions: a procedure to describe all activities related to the initiation, implementation and keeping of records of corrections, as well as corrective and preventive actions.
- Form for Management Review Minutes: a form used to document the results of management review.

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Apr 30, 2019

Apr 30, 2019