We noticed you’re not on the correct regional site. Switch to our AMERICAS site for the best experience.
  • BS 25999-2:2007 (published 2007-11)

    Superseded A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
    Add to Watchlist
    This Standard has been added successfully to your Watchlist.
    Please visit My Watchlist to see all standards that you are watching.
    Please log in or to add this standard to your Watchlist.
    We could not add this standard to your Watchlist.
    Please retry or contact support for assistance.
    You need to be logged in to add this standard to your Watchlist.
    Please log in now or create an account to add.
    You already added this Product in the Watchlist.

    Business continuity management Specification

    Available format(s):  Hardcopy, PDF

    Superseded date:  30-11-2012

    Language(s):  English

    Published date:  30-11-2007

    Publisher:  British Standards Institution

    Add to Watchlist

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    Foreword
    Introduction
    1 Scope
    2 Terms and definitions
    3 Planning the business continuity management system
      3.1 General
      3.2 Establishing and managing the BCMS
      3.3 Embedding BCM in the organization's culture
      3.4 BCMS documentation and records
    4 Implementing and operating the BCMS
      4.1 Understanding the organization
      4.2 Determining business continuity strategy
      4.3 Developing and implementing a BCM response
      4.4 Exercising, maintaining and reviewing BCM arrangements
    5 Monitoring and reviewing the BCMS
      5.1 Internal audit
      5.2 Management review of the BCMS
    6 Maintaining and improving the BCMS
      6.1 Preventive and corrective actions
      6.2 Continual improvement
    Annexes
    Annex A (informative) - Correspondence with BS EN ISO 9001:2000,
                            BS EN ISO 14001:2004, BS ISO/IEC 27001:2005
    Bibliography

    Abstract - (Show below) - (Hide below)

    Describes requirements for planning, establishing, implementing, operating, monitoring, reviewing, exercising, maintaining and improving a documented BCMS within the context of managing an organization's overall business risks.

    General Product Information - (Show below) - (Hide below)

    Committee CAR/1
    Development Note Supersedes 07/30145272 DC. (11/2007) German edition issued on 30/09/2008. (10/2008) Also available as part of BS KIT 214. (12/2010) USA Edition also available. (12/2010)
    Document Type Standard
    Publisher British Standards Institution
    Status Superseded
    Superseded By
    Supersedes

    Standards Referenced By This Book - (Show below) - (Hide below)

    12/30259858 DC : 0 BS 8587 - GUIDE TO FACILITY INFORMATION MANAGEMENT
    11/30189447 DC : 0 BS 6266 - FIRE PROTECTION FOR ELECTRONIC EQUIPMENT INSTALLATIONS - CODE OF PRACTICE
    BS PD25111(2010) : 2010 BUSINESS CONTINUITY MANAGEMENT - GUIDANCE ON HUMAN ASPECTS OF BUSINESS CONTINUITY
    11/30247091 DC : 0 BS 8484 - PROVISION OF LONE WORKER DEVICE (LWD) SERVICES - CODE OF PRACTICE
    12/30248292 DC : 0 BS 8577 - FRAMEWORK FOR THE PROVISION OF FINANCIAL ADVICE AND PLANNING SERVICES - SPECIFICATION
    DIN EN ISO 22313:2016-05 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012)
    BIP 2142 : 2012 THE ROUTE MAP TO BUSINESS CONTINUITY MANAGEMENT - MEETING THE REQUIREMENTS OF ISO 22301
    BS 8484:2009 CODE OF PRACTICE FOR THE PROVISION OF LONE WORKER DEVICE (LWD) SERVICES
    BS 31100:2008 RISK MANAGEMENT - CODE OF PRACTICE
    BS PAS 2015(2010) : 2010 FRAMEWORK FOR HEALTH SERVICES RESILIENCE
    DIN EN ISO 22313 E : 2016 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012)
    BS 8484(2011) : 2011 PROVISION OF LONE WORKER DEVICE (LWD) SERVICES - CODE OF PRACTICE
    BS PAS 55-1(2008) : 2008 ASSET MANAGEMENT - PART 1: SPECIFICATION FOR THE OPTIMIZED MANAGEMENT OF PHYSICAL ASSETS
    BS PAS 55-2(2008) : 2008 ASSET MANAGEMENT - PART 2: GUIDELINES FOR THE APPLICATION OF PAS 55-1
    BS 8587:2012 Guide to facility information management
    BS 8492(2009) : 2009 TELECOMMUNICATIONS EQUIPMENT AND TELECOMMUNICATIONS CABLING - CODE OF PRACTICE FOR FIRE PERFORMANCE AND PROTECTION
    BS TICKITPLUS - KICK START GUIDE : 2011 KICK START GUIDE, TICKITPLUS - SOFTWARE AND IT QUALITY MANAGEMENT AND CERTIFICATION
    BIP 0140 : 2014 UNDERSTANDING THE NEW ISO MANAGEMENT SYSTEM REQUIREMENTS
    12/30247740 DC : 0 BS ISO 22313 - SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE
    12/30242445 DC : 0 BS ISO 22398 - SOCIETAL SECURITY - GUIDELINES FOR EXERCISES AND TESTING
    BS 8577:2012 FRAMEWORK FOR THE PROVISION OF FINANCIAL ADVICE AND PLANNING SERVICES - SPECIFICATION
    BS ISO 22313 : 2012 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE
    BS PD25666(2010) : 2010 BUSINESS CONTINUITY MANAGEMENT - GUIDANCE ON EXERCISING AND TESTING FOR CONTINUITY AND CONTINGENCY PROGRAMMES
    BS PD25222(2011) : 2011 BUSINESS CONTINUITY MANAGEMENT - GUIDANCE ON SUPPLY CHAIN CONTINUITY
    BS 10008(2008) : 2008 EVIDENTIAL WEIGHT AND LEGAL ADMISSIBILITY OF ELECTRONIC INFORMATION - SPECIFICATION
    DIN EN ISO 22301:2014-12 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 22301:2012)
    BS EN ISO 22313:2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE
    08/30166965 DC : DRAFT AUG 2008 BS 25777 - CODE OF PRACTICE FOR INFORMATION AND COMMUNICATIONS TECHNOLOGY CONTINUITY
    10/30212010 DC : 0 BS 11000 - COLLABORATIVE BUSINESS RELATIONSHIPS - A FRAMEWORK SPECIFICATION
    BS 6266(2011) : 2011 FIRE PROTECTION FOR ELECTRONIC EQUIPMENT INSTALLATIONS - CODE OF PRACTICE
    BS PD25888(2011) : 2011 BUSINESS CONTINUITY MANAGEMENT - GUIDANCE ON ORGANIZATION RECOVERY FOLLOWING DISRUPTIVE INCIDENTS
    I.S. EN ISO 22301:2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS
    08/30136724 DC : DRAFT MAY 2008 BS 6739 - CODE OF PRACTICE FOR INSTRUMENTATION IN PROCESS CONTROL SYSTEMS - INSTALLATION DESIGN AND PRACTICE
    09/30166429 DC : 0 BS 8492 - TELECOMMUNICATIONS EQUIPMENT AND TELECOMMUNICATIONS CABLING - CODE OF PRACTICE FOR FIRE PERFORMANCE AND PROTECTION
    BIP 2151 : 2012 AUDITING BUSINESS CONTINUITY MANAGEMENT PLANS - ASSESS AND IMPROVE YOUR PERFORMANCE AGAINST ISO 22301
    BS 7000-1(2008) : 2008 DESIGN MANAGEMENT SYSTEMS - PART 1: GUIDE TO MANAGING INNOVATION
    DIN EN ISO 22301 E : 2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 22301:2012)
    BS 6739(2009) : 2009 CODE OF PRACTICE FOR INSTRUMENTATION IN PROCESS CONTROL SYSTEMS: INSTALLATION DESIGN AND PRACTICE
    BS 25777(2008) : 2008 INFORMATION AND COMMUNICATIONS TECHNOLOGY CONTINUITY MANAGEMENT - CODE OF PRACTICE
    I.S. EN ISO 22313:2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012)
    UNI EN ISO 22301 : 2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS
    ISO 22313:2012 Societal security Business continuity management systems Guidance
    ISO 22301:2012 Societal security Business continuity management systems Requirements
    EN ISO 22313 : 2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012)
    UNE-EN ISO 22301:2015 Societal security - Business continuity management systems - Requirements (ISO 22301:2012)
    UNI EN ISO 22313 : 2015 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE
    UNE-EN ISO 22313:2015 Societal security - Business continuity management systems - Guidance (ISO 22313:2012)
    UNE-ISO 22301:2013 Societal security. Business continuity management systems. Requirements
    BS 8484:2011 PROVISION OF LONE WORKER DEVICE (LWD) SERVICES - CODE OF PRACTICE
    UNE-ISO 22313:2013 Societal security.Business continuity management systems. Guidance
    EN ISO 22301 : 2014 SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 22301:2012)
    BS PAS 55-2(2008) : 2008 ASSET MANAGEMENT - PART 2: GUIDELINES FOR THE APPLICATION OF PAS 55-1
    UNI/TS 11465-1 : 2012 ELECTRONIC SIGNATURES AND INFRASTRUCTURES (ESI) - DATA PRESERVATION SYSTEMS SECURITY - PART 1: REQUIREMENTS FOR IMPLEMENTATION AND MANAGEMENT
    BS PAS 55-1(2008) : 2008 ASSET MANAGEMENT - PART 1: SPECIFICATION FOR THE OPTIMIZED MANAGEMENT OF PHYSICAL ASSETS

    Standards Referencing This Book - (Show below) - (Hide below)

    BS ISO/IEC TR 13335-4 : 2000 INFORMATION TECHNOLOGY - GUIDELINES FOR THE MANAGEMENT OF IT SECURITY - PART 4: SELECTION OF SAFEGUARDS
    ISO/IEC Guide 62:1996 General requirements for bodies operating assessment and certification/registration of quality systems
    BS EN ISO 9001:2015 Quality management systems. Requirements
    BS 25999-1(2006) : 2006 BUSINESS CONTINUITY MANAGEMENT - PART 1: CODE OF PRACTICE
    BS ISO/IEC 20000-2:2012 INFORMATION TECHNOLOGY - SERVICE MANAGEMENT - PART 2: GUIDANCE ON THE APPLICATION OF SERVICE MANAGEMENT SYSTEMS
    BS EN ISO 14001:2015 ENVIRONMENTAL MANAGEMENT SYSTEMS - REQUIREMENTS WITH GUIDANCE FOR USE
    BS ISO/IEC 20000-1:2011 INFORMATION TECHNOLOGY - SERVICE MANAGEMENT - PART 1: SERVICE MANAGEMENT SYSTEM REQUIREMENTS
    BS ISO/IEC 17799 : 2005 INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - CODE OF PRACTICE FOR INFORMATION SECURITY MANAGEMENT
    ISO/IEC Guide 73:2002 Risk management Vocabulary Guidelines for use in standards
    BS ISO/IEC TR 13335-3 : 1998 INFORMATION TECHNOLOGY - GUIDELINES FOR THE MANAGEMENT OF IT SECURITY - TECHNIQUES FOR THE MANAGEMENT OF IT SECURITY
    BS ISO/IEC 27001 : 2013 INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - INFORMATION SECURITY MANAGEMENT SYSTEMS - REQUIREMENTS
    BS EN ISO 9000:2015 Quality management systems. Fundamentals and vocabulary
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective