A business continuity management standard would offer consistency


It seems that BCM standards, by themselves, are not necessary and may not even be useful. But demonstrated compliance with a standard is extremely useful, and a globally recognized standard used for consistent measurement is necessary to that end.

Read the rest of this entry »

CFTC Issues Proposed Business Continuity and Disaster Recovery Regulation


The U.S. Commodity Futures Trading Commission (CFTC) proposed a regulation that would establish a recovery standard for designated contract markets (DCMs) and derivatives clearing organizations (DCOs) that the Commission determines to be critical financial markets in the event of a wide-scale disruption that affects such entities’ trading or clearing operations.

Read the rest of this entry »

Contingency Planning for Information Systems: Updated Guide for Federal Organizations


Interruptions to information technology (IT) system services can have a severe impact on an organization and its ability to carry out its basic functions. IT resources are essential to most business processes, and organizations depend upon information systems that operate effectively without serious interruptions. When organizations develop and maintain contingency plans for their IT systems, they can create a coordinated strategy to identify technical procedures and methods that will prevent most service disruptions and enable quick recovery should any disruptions occur.

Read the rest of this entry »

DHS Secretary Napolitano Announces New Standards for Private Sector Preparedness


Department of Homeland Security (DHS) Secretary Janet Napolitano  announced the adoption of the final standards for the Voluntary Private Sector Preparedness Accreditation and Certification Program (PS-Prep)—a major milestone in DHS’ implementation of a program recommended by the 9/11 Commission to improve private sector preparedness for disasters and emergencies.

Read the rest of this entry »

South Africa: New governance rules bring business continuity to the boardroom


The updated corporate governance requirements in South Africa’s King III report set out four key focus areas for IT governance: strategic alignment, value delivery, risk management and resource  management.

Read the rest of this entry »

Standards: New Zealand and Australia HB 327:2010 Communicating and Consulting about Risk


A new joint New Zealand and Australian Handbook – ‘HB 327:2010 Communicating and Consulting about Risk’ has been published. Read the rest of this entry »

Good Practice Guidelines: 2010 Global Edition


The new Good Practices Guidelines (GPG), compiled by an international Working Party of Business Continuity Institute (BCI) members, is now available

Read the rest of this entry »

The Netherlands Adopts the ASIS International Organizational Resilience Standard


ASIS International’s American National Standard for Organizational Resilience has been adopted as a national standard in the Netherlands. The ANSI/ASIS SPC.1-2009 American National Standard, “Organizational Resilience: Security, Preparedness and Continuity Management Systems–Requirements with Guidance for Use,” was published as a Dutch National Standard (NEN 7131) by the Netherlands Standardization Institute in January 2010. This follows the publication as a Danish National Standard (DS 3001) in September 2009 by Danish Standards.
Read the rest of this entry »

Applying the ISO 27005 risk management standard


ISO 27005, issued in 2008, filled a noticeable gap in the ISO 27000 series of standards. The standard is officially titled ISO/IEC 27005.2008, “Information technology — Security techniques — Information security risk management.”

Read the rest of this entry »

New ISO 31000 risk management standard receives good early reviews


Two months after its debut, reviewers pretty much agree that ISO 31000 lives up to its billing as a good generic, process-oriented risk management framework that addresses myriad forms of risk across many industries. The question is, do you need it?

Read the rest of this entry »

A short tour of business continuity management standards: How we got here and where we are goin


This article summarizes standards for business continuity over the past decade.

Read the rest of this entry »