|
|
Enterprise Resiliency
Blueprint

Resiliency Program
Goals & Objectives

Program
Management

Crisis Management

Reliability Strategies

Implementation and
Plan Development

Disaster
Prevention
and Emergency Preparedness

Specialized IT
Consulting

|
|
|
BS 25999 Standard for Business Continuity
Industry best practices are key drivers for designing and implementing effective Business Continuity programs. These best practices can be obtained from industry experience, various industry associations and published standards. One such standard, originally published in November of 2006, is called BS 25999, authored by the British Standards Institute (BSI)*. This international standard is becoming increasingly popular in the US for measuring corporate resiliency. The standard was compiled by BSI with the help of several dozen industry organizations and provides a framework for Business Continuity Programs to be audited and certified. Stakeholders and clients of a BS 25999 certified organization can be assured that the organization meets the BSI requirements for an effective Business Continuity Management System (BCMS).
The Roadmap for BS 25999 Compliance
Eagle Rock recognizes the BS 25999 standard as a significant approach in the advancement of industry best practices. As such, Eagle Rock has aligned relevant portions of its ERA*360 enterprise resiliency assessment model to produce a BS 25999 graphical view in order to measure compliance with this standard. This allows Eagle Rock to then produce a gap analysis against the standard, complete with an action plan for what is required to comply with the standard and to prepare the organization for the certification process.
Following is a sample graph which depicts an alignment of ERA*360 examination points with the BS 25999-2 specification:
BS 25999 Business Continuity Management System Assessment
The graph displays 11 key areas which are detailed in the BS 25999-2 specification document published in November 2007. This sample graph displays red areas which are reported as deficient in meeting the standard as well as some yellow areas which are not mature enough to qualify for certification. The scoring mechanism follows the same criteria of our more comprehensive ERA*360 enterprise resiliency assessment with the supporting detail providing the actionable gap analysis.
* This British Standard was published by BSI (British Standard Institute) and has been produced to define requirements for a management systems approach to business continuity management based on good practice for use in large, medium and small organizations operating in industrial, commercial, public and voluntary sectors. BSI is an independent national body responsible for preparing British Standards. Visit them on the web at www.bsiamerica.com
|
|
|