Use BS 25999 to guide the practice of Risk Management and Business Continuity Management

Building upon the foundation understanding of the BS 25999 Business Continuity Management System (BCMS) platform learned in the first session, this course provides participants with the knowledge, methods, and skills to put the previous course's strategy into practice. It is based on industry best practice and guidelines for business continuity and reviews the "Business Continuity Management - Part 1 - Code of Practice" released by BSI, BS 25999-1:2006, and "Business Continuity Management - Part 2 - Specification" released by BSI, BS 25999-2:2007. Again, practical exercises and instructor-led discussions will help students understand the techniques to deploy, test, and maintain business continuity management in an organization.

BS 25999 advocates applying the same Plan-Do-Check-Act management methodology found in many other BSI, ISO, and IEC standards. Accordingly, this course addresses BCMS Life Cycle key concepts required for BCMS deployment, monitoring, testing, and maintenance. This course naturally follows attendance of Establishing a Business Continuity Management System.

The tactics that support the BS 25999 Business Continuity Management strategy

Click to Enlarge

Developing and Implementing a business continuity management Response

• Developing, coordinating, evaluating and creating plans and procedures to communicate with internal stakeholders during incidents.
• The provision of post-incident support and guidance for employees and their families.
  Developing and implementing emergency response procedures for responding to and stabilizing the situation following an incident or event.
• Establishing and managing an Emergency Operations Centre to be used as a command centre during the emergency.
  Practical experience in handling incidents/emergencies.
• Develop Incident response procedures to fulfill Business Continuity Management objectives.
• Designing, developing and implementing business continuity and incident management plans that provide continuity within recovery time and/or recovery point objectives.

Exercising, Maintenance and Review

• Pre-planning and coordinating plan walk-throughs/exercises.
• Evaluating, updating, improving and documenting the results of exercises.
• Developing processes to maintain the currency of continuity capabilities, business continuity and incident management plans in accordance with the organization's strategic direction.
• Establishing appropriate policies and procedures for coordinating incidents, continuity and restoration activities with external agencies whilst ensuring compliance with applicable statutes and/or regulations.
  Practical experience in dealing with external agencies.

Embedding Business Continuity Management within the Organization's Culture

• Preparing a program to create and maintain corporate awareness and enhance the skills required to develop and implement the business continuity management program or process and its supporting activities.

Certifying Your Organization's Business Continuity Management System to BS25999-2

• The certification process
• Preparing for the certification audit
• Case Studies

deploying, measuring, and maintining bs 25999 business continuity management is a team effort! Decisions regarding critical business processes, organizational resources including people, facilities, products, services, and information technology are not made by a single person, or even a group of three or four.

• Decisions on how your organization will choose to accept risk, or invest to mitigate risk will ultimately be decided by the very people who are ultimately accountable for how well the organization runs - in good times and in bad.
• Therefore, senior management is required to at least lead BCM risk and strategy, which are covered in Establishing a Business Continuity Management System.
• Other employees, who will go on plan and deploy BCM controls will continue on to attend Using BS 25999 Best Practices to Develop, Exercise, and Certify Business Continuity and Disaster Recovery Processes.
• Learn more about how you can train your entire BCM team at half of the cost of regular public pricing.

Accordingly, the following key operations and risk management are recommended to attend since each is required to participate in the Business Continuity Management System:

Course Prerequisites

This is an advanced business strategy seminar. It is not a technical "how-to" course. This course will explore various business processes, environments, and risk strategy approaches to help you better understand how to best protect your organization's ability to prevent and sufficiently mitigate the business impact of a disruptive event.

Prior business is experience is highly recommended, and financial risk decision authority is preferred.

- or-