Business Continuity Management

There are now three standards for Business Continuity Management:

• BSi 25999, for sale from the British Standards Institute
• ASIS BCM 1, for sale from ASIS (formerly American Society for Industrial Security)
• NFPA 1600, free download from National Fire Protection Association

This will change to two, as BSi and ASIS have combined their individual standards into one. The joint standard was approved by the writing committee on July 22, 2010, and is now out for public review before acceptance by ANSI (the American National Standards Institute). You can obtain a copy for review and provide your comments back to the committee, as described in the August 6 issue of ANSI's Standards Action:

BSR/ASIS/BSI BCM.01-201x, Business Continuity Management Systems - Requirements with Guidance for Use (Joint ASIS International and British Standards Institute (BSI) Standard) (new standard)

Specifies requirements for a business continuity management system (BCMS) to enable an organization to identify, develop, and implement policies, objectives, capabilities, processes, and programs - taking into
account legal and other requirements to which the organization subscribes - to address disruptive events that might impact the organization and its stakeholders. This Standard specifies requirements for planning, establishing, implementing, operating, monitoring, reviewing, exercising, maintaining, and improving a documented BCMS within the context of managing an organization's risks.

Single copy price: $50.00

Obtain an electronic copy from: aivelis.opicka@asisonline.org
Order from: Aivelis Opicka, (703) 518-1400, aivelis.opicka@asisonline.org
Send comments (with copy to BSR) to: standards@asisonline.org

My personal opinion is that the BSi/ASIS document will become the one use by most businesses. It seems to focus on results more than bureaucracy. This is a hot topic right now, with climate change and international trade adding complexity to business (and government) operations.