Monday, April 16, 2007

Business Continuity Management

BSI has recently come up with a new standard for Business Continuity Management (BCM) -- the BS25999 ... This is a continuity of PAS 56 which is now withdrawn. You can buy the standard here at http://www.bsi-global.com/en/Shop/Publication-Detail/?pid=000000000030157563

In step with it, The BCI (Business Continuity Institute) has updated its Good Practice Guideline (GPG) which is available for free download at http://www.thebci.org/gpg.htm

The GPG (2007 version) is nicely aligned with the BS25999 so that even if you have not seen the Standard, the guideline has the entire information and more. So I would definitely recommend it for those who want to study or implement BC in their organization.

It is common sense that BCM is desirable and that organizations should implement BCM. But in real life only a limited number of organizations consciously work towards creating and maintaining their BCM plans. So I was wondering what is it that motivates those organizations or their Managements to put BCM on their radar? Are there some differentiators between those organizations that do put in the efforts towards their Business Continuity and those that pay only lip service ?
As a corollary, what could motivate an organization to start or increase its efforts towards establishing a BCM? Do post your comments ....

1 comment:

Gotya said...

(Posting this first comment from Gary Hinson. He was facing some technical issue in posting here and was kind enough to email the comment to me. Thanks Gary).

Hello Guatam.

I think there are maybe three main reasons why companies 'do' BCM:

1. A third party authority (e.g. an industry regulator) tells them they have
to do it

2. Someone inside the organization, or a consultant, tells them it's a good
idea because ...

or

3. They suffer a disruptive incident and (if they survive!) suddenly
appreciate how much they need contingency plans.

Reason 1 is powerful in some industries and 3 will always get some attention
but 2 is down to people like you and me Guatam, trying our level best to
spread good practices, sell the advantages of risk avoidance and so on.

Kind regards,
Gary Hinson
NoticeBored"
I also run a blog: mine is at http://www.noticebored.com/blog/NBlog.html