Business Resilience will be a high priority for all businesses over the next 12 months. Organisations have to deal with a wide range of risks and your business resilience strategy should have four core strands:
- A business continuity plan, that plans and rehearses response to all identified and likely operational disruptions;
- A disaster recovery plan, that enables the organisation to recover from real disasters;
- A value protection plan, that ensures that shareholder value is protected at times of disruption;
- An exploitation plan, that enables the organisation to spot – and exploit – commercial opportunities that may present themselves during times of substantial disruption.
The idea of resilience – that an organisation’s systems and processes should be resilient against outside attack or natural disaster – is a key principle underpinning ISO27001. Business continuity for Information and Communications Systems is fundamental to an effective ISMS, and the British Standard BS25777 provides detailed and valuable guidance on how this critical aspect should be tackled. Designed to work within a broader Enterprise business continuity management system (such as that specified in the world-leading BS25999), BS25777 should form part of every organisation’s planning for cyber security and cyber resilience.
Buy BS25777 today, it gives recommendations for information and communications technology (ICT) continuity management within the overall framework of business continuity management provided by BS25999.
The BS25999 BCMS Implementation Toolkit provides a cost effective route to effective business resilience.
In addition to all the documentation templates, this unique toolkit contains:
- PDCA Guidance
- a Business Impact Assessment (BIA) Tool
- a Risk Assessment and Risk Register Tool
- a BS25999 Gap Analysis/Audit Tool
- a BS25999 Induction and Awareness Slide Presentation
- a BS25999 implementation progress checklist
- a BS25999 Project Management Implementation Plan.
This toolkit also contains electronic copies of two specialist guides, which are useful both for the project manager and for other team members, as well as for training and awareness activity.