ISO27031 (ISO/IEC 27031) Guidelines for ICT Readiness for Business Continuity
ISO/IEC 27031:2011 is the latest (March 2011) International Standard that describes the concepts and principles of information and communication technology (ICT) readiness for business continuity.
ISO/IEC 27031 provides a framework of methods and processes to identify and specify all
aspects for improving an organisation's ICT readiness to ensure business continuity,
including performance criteria, design and implementation.
Ensure your ICT's Readiness for Business Continuity
This standard is applicable in any organisation (private, governmental, and non-governmental, irrespective of size). It will aid them in developing an ICT
Readiness for Business Continuity programme (IRBC).
An IRBC is a programme that requires an organisation's ICT services/infrastructures to be ready to support business operations in the event of emerging events and incidents, and related disruptions, that could affect continuity (including security) of critical business functions. It also
allows an organisation to assess if performance parameters correlate to its IRBC in a consistent and recognised manner.
Scope of ISO27031
The scope of ISO/IEC 27031:2011 encompasses all events and incidents (including security-related) that could have an impact on ICT infrastructure and systems. It includes and extends the practices of information security incident handling and management and ICT readiness planning and services.
Why implement ISO27031?
-
Provides a bridge between general business continuity management and information technology. ISO/IEC 27031 ties together BS25999, ISO/IEC 27001 and ISO/IEC 24762 to information and communications technology (ICT) business continuity preparedness. Sharing essential guidance.
-
Will help you and your organisation understand the threats to, and vulnerabilities of, ICT services, enabling you to ensure your organisation is guarded against such threats and vulnerabilities.
-
Provides a framework of methods and processes to identify and specify all aspects for improving an organisation's ICT readiness to ensure business continuity. This will help you to ensure your organisation is ready should disaster strike.