BS 25999-2:2007
Superseded
A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.
Business continuity management Specification
Hardcopy , PDF
11-30-2012
English
11-30-2007
Foreword
Introduction
1 Scope
2 Terms and definitions
3 Planning the business continuity management system
3.1 General
3.2 Establishing and managing the BCMS
3.3 Embedding BCM in the organization's culture
3.4 BCMS documentation and records
4 Implementing and operating the BCMS
4.1 Understanding the organization
4.2 Determining business continuity strategy
4.3 Developing and implementing a BCM response
4.4 Exercising, maintaining and reviewing BCM arrangements
5 Monitoring and reviewing the BCMS
5.1 Internal audit
5.2 Management review of the BCMS
6 Maintaining and improving the BCMS
6.1 Preventive and corrective actions
6.2 Continual improvement
Annexes
Annex A (informative) - Correspondence with BS EN ISO 9001:2000,
BS EN ISO 14001:2004, BS ISO/IEC 27001:2005
Bibliography
Describes requirements for planning, establishing, implementing, operating, monitoring, reviewing, exercising, maintaining and improving a documented BCMS within the context of managing an organization's overall business risks.
| Committee |
CAR/1
|
| DevelopmentNote |
Supersedes 07/30145272 DC. (11/2007) German edition issued on 30/09/2008. (10/2008) Also available as part of BS KIT 214. (12/2010) USA Edition also available. (12/2010)
|
| DocumentType |
Standard
|
| Pages |
28
|
| PublisherName |
British Standards Institution
|
| Status |
Superseded
|
| SupersededBy | |
| Supersedes |
| Standards | Relationship |
| UNE 71599-2:2010 | Identical |
| BIP 2142 : 2012 | THE ROUTE MAP TO BUSINESS CONTINUITY MANAGEMENT - MEETING THE REQUIREMENTS OF ISO 22301 |
| BS ISO 22313 : 2012 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE |
| 08/30166965 DC : DRAFT AUG 2008 | BS 25777 - CODE OF PRACTICE FOR INFORMATION AND COMMUNICATIONS TECHNOLOGY CONTINUITY |
| 10/30212010 DC : 0 | BS 11000 - COLLABORATIVE BUSINESS RELATIONSHIPS - A FRAMEWORK SPECIFICATION |
| 09/30166429 DC : 0 | BS 8492 - TELECOMMUNICATIONS EQUIPMENT AND TELECOMMUNICATIONS CABLING - CODE OF PRACTICE FOR FIRE PERFORMANCE AND PROTECTION |
| DIN EN ISO 22301 E : 2014 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 22301:2012) |
| I.S. EN ISO 22313:2014 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012) |
| UNE-ISO 22301:2013 | Societal security. Business continuity management systems. Requirements |
| BS 8484:2011 | Provision of lone worker device (LWD) services. Code of practice |
| 12/30259858 DC : 0 | BS 8587 - GUIDE TO FACILITY INFORMATION MANAGEMENT |
| 11/30189447 DC : 0 | BS 6266 - FIRE PROTECTION FOR ELECTRONIC EQUIPMENT INSTALLATIONS - CODE OF PRACTICE |
| PD 25111:2010 | Business continuity management. Guidance on human aspects of business continuity |
| BS 8484:2009 | Code of practice for the provision of lone worker device (LWD) services |
| BS 31100:2008 | RISK MANAGEMENT - CODE OF PRACTICE |
| BIP 0140 : 2014 | UNDERSTANDING THE NEW ISO MANAGEMENT SYSTEM REQUIREMENTS |
| 12/30247740 DC : 0 | BS ISO 22313 - SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE |
| PD 25222:2011 | Business continuity management. Guidance on supply chain continuity |
| BS 10008:2008 | Evidential weight and legal admissibility of electronic information. Specification |
| DIN EN ISO 22301:2014-12 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS (ISO 22301:2012) |
| BS EN ISO 22313:2014 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE |
| PD 25888:2011 | Business continuity management. Guidance on organization recovery following disruptive incidents |
| I.S. EN ISO 22301:2014 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS |
| BS 6739:2009 | Code of practice for instrumentation in process control systems: installation design and practice |
| BS 6266:2011 | Fire protection for electronic equipment installations. Code of practice |
| BS 7000-1:2008 | Design management systems Guide to managing innovation |
| BS TICKITPLUS - KICK START GUIDE : 2011 | KICK START GUIDE, TICKITPLUS - SOFTWARE AND IT QUALITY MANAGEMENT AND CERTIFICATION |
| 12/30242445 DC : 0 | BS ISO 22398 - SOCIETAL SECURITY - GUIDELINES FOR EXERCISES AND TESTING |
| BS 8577:2012 | Framework for the provision of financial advice and planning services. Specification |
| 08/30136724 DC : DRAFT MAY 2008 | BS 6739 - CODE OF PRACTICE FOR INSTRUMENTATION IN PROCESS CONTROL SYSTEMS - INSTALLATION DESIGN AND PRACTICE |
| BS 25777:2008 | INFORMATION AND COMMUNICATIONS TECHNOLOGY CONTINUITY MANAGEMENT - CODE OF PRACTICE |
| BS PAS 55-2(2008) : 2008 | ASSET MANAGEMENT - PART 2: GUIDELINES FOR THE APPLICATION OF PAS 55-1 |
| UNI/TS 11465-1 : 2012 | ELECTRONIC SIGNATURES AND INFRASTRUCTURES (ESI) - DATA PRESERVATION SYSTEMS SECURITY - PART 1: REQUIREMENTS FOR IMPLEMENTATION AND MANAGEMENT |
| BS PAS 55-1(2008) : 2008 | ASSET MANAGEMENT - PART 1: SPECIFICATION FOR THE OPTIMIZED MANAGEMENT OF PHYSICAL ASSETS |
| 11/30247091 DC : 0 | BS 8484 - PROVISION OF LONE WORKER DEVICE (LWD) SERVICES - CODE OF PRACTICE |
| 12/30248292 DC : 0 | BS 8577 - FRAMEWORK FOR THE PROVISION OF FINANCIAL ADVICE AND PLANNING SERVICES - SPECIFICATION |
| DIN EN ISO 22313:2016-05 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012) |
| BS PAS 2015(2010) : 2010 | FRAMEWORK FOR HEALTH SERVICES RESILIENCE |
| DIN EN ISO 22313 E : 2016 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE (ISO 22313:2012) |
| PD 25666:2010 | Business continuity management. Guidance on exercising and testing for continuity and contingency programmes |
| UNI EN ISO 22301 : 2014 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - REQUIREMENTS |
| ISO 22301:2012 | Societal security Business continuity management systems Requirements |
| EN ISO 22313:2014 | Societal security - Business continuity management systems - Guidance (ISO 22313:2012) |
| UNE-EN ISO 22301:2015 | Societal security - Business continuity management systems - Requirements (ISO 22301:2012) |
| UNI EN ISO 22313 : 2015 | SOCIETAL SECURITY - BUSINESS CONTINUITY MANAGEMENT SYSTEMS - GUIDANCE |
| UNE-EN ISO 22313:2015 | Societal security - Business continuity management systems - Guidance (ISO 22313:2012) |
| EN ISO 22301:2014 | Societal security - Business continuity management systems - Requirements (ISO 22301:2012) |
| BS 8587:2012 | Guide to facility information management |
| BS 8492:2009 | Telecommunications equipment and telecommunications cabling. Code of practice for fire performance and protection |
| BIP 2151 : 2012 | AUDITING BUSINESS CONTINUITY MANAGEMENT PLANS - ASSESS AND IMPROVE YOUR PERFORMANCE AGAINST ISO 22301 |
| ISO 22313:2012 | Societal security Business continuity management systems Guidance |
| UNE-ISO 22313:2013 | Societal security.Business continuity management systems. Guidance |
| BS ISO/IEC TR 13335-4:2000 | Information technology. Guidelines for the management of IT security Selection of safeguards |
| ISO/IEC Guide 62:1996 | General requirements for bodies operating assessment and certification/registration of quality systems |
| BS EN ISO 9001:2015 | Quality management systems. Requirements |
| BS 25999-1:2006 | BUSINESS CONTINUITY MANAGEMENT - PART 1: CODE OF PRACTICE |
| BS ISO/IEC 20000-2:2012 | Information technology. Service management Guidance on the application of service management systems |
| BS EN ISO 14001:2015 | Environmental management systems. Requirements with guidance for use |
| BS ISO/IEC 20000-1:2011 | Information technology. Service management Service management system requirements |
| BS ISO/IEC 17799 : 2005 | INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - CODE OF PRACTICE FOR INFORMATION SECURITY MANAGEMENT |
| ISO/IEC Guide 73:2002 | Risk management Vocabulary Guidelines for use in standards |
| BS ISO/IEC TR 13335-3:1998 | Information technology. Guidelines for the management of IT security Techniques for the management of IT security |
| BS ISO/IEC 27001 : 2013 | INFORMATION TECHNOLOGY - SECURITY TECHNIQUES - INFORMATION SECURITY MANAGEMENT SYSTEMS - REQUIREMENTS |
| BS EN ISO 9000:2015 | Quality management systems. Fundamentals and vocabulary |
Please Login or Create an Account so you can add users to your Multi user PDF Later.
Important note : All end users must be registered with an Account prior to user licenses being assigned.
Users cannot be edited or removed once added to your Multi user PDF.
Access your standards online with a subscription
Features
-
Simple online access to standards, technical information and regulations.
-
Critical updates of standards and customisable alerts and notifications.
-
Multi-user online standards collection: secure, flexible and cost effective.