Background

BS 25999 is the British Standard for Business Continuity Management (BCM) and is applicable to all organizations, regardless of type, size or sector. 

The Standard provides a system based on BCM best practice which is designed to build and measure organisational resilience to enable an effective response to a business disruption.  Ultimately, to protect your people, maintain your critical business functions and preserve, or enhance your reputation.

Purpose

The purpose of the Standard is to:

• Provide a basis for understanding, developing and implementing business continuity within an organization
• Provide confidence in the organisation’s dealings with customers and other organisations
• Enable the organization to measure its BCM capability in a consistent and recognized manner

The Standard

BS25999 is divided into two parts:

• Part 1 – The Code of Practice (published in Dec 06).  This establishes the process, principles, terminology and best practice recommendations.  This is a guidance document only.

• Part 2 – The Specification (published in Nov 07).  This specifies requirements for establishing, implementing, operating, monitoring, reviewing, exercising, maintaining and improving a documented Business Continuity Management System (BCMS) within the context of managing an organization’s overall business risks.  It is this part of the Standard that can be used by internal and external parties, (including certification bodies), to assess an organisation’s ability to meet its own business continuity needs, as well as any customer, legal or regulatory requirements.
  
  

The Benefits

• Common and consistent BCM framework
• Builds organisational resilience
• BS25999 Part 2 Certification provides client/stakeholder assurance
• Protects and enhances reputation and brand
• Provides a competitive advantage
• Furthers organisational/business understanding and identifies opportunities for improvement

The BS25999 Business Continuity Management Lifecycle

Source:  BS25999 Part 1 British Standard for Business
Continuity Management. 2006.  Page 9

NEEDHAMS 1834 Services (in accordance with BS25999)

In partnership with your organisation we can:

• Undertake the entire BCM Lifecycle process including end-to-end BCM Programme Management.
• Undertake the necessary Risk Analysis
• Undertake the Business Impact Assessment (BIA)
• Assist in determining your BCM strategies based on the BIA
• Develop, author and assist in the implementation of the plan
• Deliver a structured and progressive training and/or exercise package
• Audit your BCM plans in preparation for BS25999 Part 2 Certification