ASIS Proposes New U.S. Business Continuity Standard
ASIS Announces Plans for New U.S. Business Continuity and Risk Assessment Standards
ASIS International, a leading organization for security management professionals, has announced its intent to initiate development of two American National Standards. The business continuity management standard will be based on the ASIS Business Continuity Guideline, and the risk assessment standard will be based on the ASIS General Security Risk Assessment Guideline.
The Business Continuity Management American National Standard, based on the ASIS guideline, will include auditable criteria for preparedness, crisis management, business and operational continuity and disaster management.
The General Security Risk Assessment American National Standard, based on the ASIS guideline, will provide a needed basis for the process involved in the objective analysis of the efficacy of risk management controls that protect an organization’s assets. It will address operational risks and not financial risks.
Both American National Standards will utilize a management systems process approach using the Plan-Do-Check-Act model. Organizations of all types, including those in the global business community, not-for-profit entities, educational institutions, government agencies and more will likely be directly impacted by the standards.
In 2007, ASIS decided to actively contribute to the process of developing both national and international standards in the security arena by way of its American National Standards Institute (ANSI) Standards Developing Organization status, as well as International Organization for Standardization (ISO) Liaison A status.
Next steps include the formation of ASIS standards committees that will begin the process of developing the American National Standards, as well as letter balloting and ANSI public review.
