BS 25999 for Business Continuity

Continuing operations in the event of a disruption, whether due to a major disaster or a minor incident, is a fundamental requirement for any organization. The new BS 25999 standard for business continuity management (BCM) was developed to help minimize the risk of such disruptions.

By helping to put the fundamentals of a BCM system in place, the standard is designed to keep your business going during the most challenging and unexpected circumstances – protecting your staff, preserving your reputation, and providing the ability to continue operations.

BS 25999 was developed by practitioners throughout the global community, drawing upon their considerable academic, technical, and practical experiences to establish the process, principles, and terminology of Business Continuity Management.

It provides a basis for understanding, developing, and implementing business continuity within your organization and gives you confidence in business-to-business and business-to customer dealings. It also contains a comprehensive set of requirements based on BCM best practice and covers the whole BCM lifecycle.

BS 25999 has two parts:

BS 25999-1:2006Code of Practice for Business Continuity Management, is a guide that establishes the principles, terminology, and process of business continuity management. It covers the activities and deliverables applicable in establishing a continuity management process, as well as, providing recommended good practice steps.

BS 25999-2:2007Specification for Business Continuity Management, is intended for use by internal and external parties (including certification bodies) to assess the organization’s ability to meet customer and regulatory requirements. It specifies requirements for establishing, implementing, operating, monitoring, reviewing, exercising, maintaining, and improving a documented BCM System within the context of managing an organization’s overall business risks.

The design and implementation of a BCM System to meet the requirements of this standard will be influenced by regulatory, customer and business requirements, the products and services, the processes employed, and the size and structure of the organization.

BS 25999 is suitable for any organization, large or small, from any sector. It is particularly relevant for organizations that operate in high risk environments, such as, finance, telecommunications, transport, and the public sector, where the ability to continue operating is paramount for the organization and its customers.

You can order BS 25999 at this BSI Web Page.