Please click on the cover of the book to buy online ISBN: 9781780171463 Binding: Paper Back Year: 2014 No of Pages: 172pp Original Publisher: BCS, The Chartered Institute for IT Reprinted by: Viva Books Special Indian Price: Rs. 495.00 Price after 10% discount = Rs. 445.00 | Business Continuity Management Systems
Implementation and Certification to ISO 22301
Authors: Hilary Estall Review: If you want to know more about ISO 22301 this is the first (and perhaps only) book you need to read. If you thought BCMS was a dry subject, you might well be very surprised! – Lyndon Bird FBCI, Business Continuity Institute An essential read for anyone considering implementation or certification to ISO 22301; practical and insightful. – Russell Price, Chairman, Continuity Forum Description: This practical guide is for people and organisations who are implementing a business continuity management system and certification in line with ISO 22301. The development of a BCMS requires commitment, time, resourcefulness and management support. This book will fully equip those new to business continuity management or to management systems with survival skills for the ups and downs of the journey. The advice given is ideal for organisations seeking certification to ISO 22301 as well as those who want to align to it.
It is divided into four parts; the first two focus on the management system aspects and the other two look at the requirements of the standard and translate them into user-friendly guidance notes.
* Hands-on guide to the new standard * Includes similarities and differences between ISO 22301 and its predecessor BS 25999 * The only ‘working tool’ on the market * Includes self-assessment checklists and worksheets to support progress
Contents: Introduction • Who should read this book? • The objective of this book • Reader beware! • How to use this book • MANAGEMENT SYSTEMS UNCOVERED • Purpose and objective • Terms and definitions • Management systems explained • Plan Do Check Act (PDCA) model • Mandatory requirements for management systems • Determining the scope of the management system • Top management responsibilities with respect to the management system • Management system documentation • Improvement • Writing policies and setting objectives • Allocation of suitable resources • Determining competencies • Evaluation of the performance and effectiveness of the management system • Alignment with or certification to ISO 22301? Which path should I choose? • Conclusion: Should my organisation consider certification? • Summary • BUSINESS CONTINUITY FROM A MANAGEMENT SYSTEM PERSPECTIVE • Purpose and objective • The BCM lifecycle • Positioning the BCM lifecycle with your BCMS • Summary • COMPARING ISO 22301 WITH BS 25999 AND UNDERSTANDING THE DIFFERENCES • Purpose and objective • How BCMS standards are produced • The similarities between ISO 22301 and BS 25999 • The differences between ISO 22301 and BS 25999 • Certificate transition • Summary • THE CERTIFICATION PROCESS • Purpose and objective • Terms and definitions • Choosing a certification body • Audit stages • What to expect from the audit process • How to prepare for the audit • The audit experience • Maintaining momentum after the initial audit and between audits • Summary • APPENDIX A • Evaluating the performance of your business continuity management system • APPENDIX B • ISO 22301 Self assessment checklist • REFERENCES • SOURCES OF FURTHER INFORMATION • Index
About the Authors: Hilary Estall has lengthy practical experience in auditing and implementing management systems. She is currently the only IRCA-registered BCMS Lead Auditor in the UK and has ‘Specialist’ membership status with the Business Continuity Institute (BCI). Hilary runs her own business continuity consultancy company Perpetual Solutions Limited. |

Please click on the cover of the book to buy online ISBN: 9781906124724 Binding: Paper Back Year: 2011 No of Pages: 136pp Original Publisher: BCS, The Chartered Institute for IT Reprinted by: Viva Books Special Indian Price: Rs. 195.00 Price after 10% discount = Rs. 176.00 | Business Continuity Management A Practical Guide Author: Stuart Hotchkiss Review: This is an excellent guide to the business continuity process. It is well organised, easy to read and jargon-free. An ideal reference for anyone involved in business continuity - from the office manager to the boardroom. – Susan Rudlin, Head of Facilities-BCS,The Chartered Institute for ITDescription: Successful business continuity requires the creation of and adherence to a plan which ensures an organisation’s critical functions are maintained or restored in the event of disruption e.g. fires, natural disasters, industrial action. The subject can be made over-complicated, but this book provides a clear and simple template-based approach. Stakeholder involvement is key in BCM so this book will appeal to a wide audience including CEOs, IT directors, facilities management, operations managers, and business unit managers. It covers all stages and issues from business impact analysis to organisational issues, escalation management and the practical aspects of running a BCM project. • A practical approach to business continuity • Templates for a quick start in creating a BCM plan • Author is a leading expert on the subject • A vital topic for all organisations in an increasingly online and ‘always on’ world Contents: INTRODUCTION AND PURPOSE • Why have business continuity? • What exactly is a ‘continuity plan’? • Business continuity – planning or management? • Why does continuity management fail? • A real – life continuity plan • The BCM life-cycle • GENERAL ISSUES IN CONTINUITY MANAGEMENT • Some terminology • Standards • Regulatory issues • Availability, up-time and reliable components • The downtime myth • Application and asset approach • It won’t happen to us • Disasters • The cost of failure • The cost of success • Customer satisfaction • Some industries are different • IN PRACTICE – THE FOUNDATIONS • Company strategy • Continuity strategy • Business continuity policy • Planning • BUSINESS IMPACT ANALYSIS • Introduction • The objectives of the BIA • Level of detail and scope • Critical success factors • Assessing impact • Revenue at risk • Tools • The process in detail • THE BUSINESS IMPACT ANALYSIS REPORT • THREATS, RISKS AND RISK ANALYSIS • Introduction • In practice • Risk life-cycle • SUPPORTING FUNCTIONS AND DEPARTMENTS • The special cases of IT and facilities • General issues with IT recovery architectures • IT considerations • Procurement considerations • Human Resource considerations • Facilities considerations • Finance considerations • SCENARIOS • Scenarios and capability • PROCEDURES –THE LAST THING TO DO IS THINK • IT procedures • TESTING AND STAYING FRIENDS • In-depth analysis • Desk testing • Live testing • AUDIT • Test logs • Stakeholder management • Auditing yourself • IMPLEMENTATION AND GOVERNANCE • A governance framework • Job descriptions • Incident and escalation management • Escalation structure • COMMUNICATIONS • TRAINING • ORGANISATIONAL ISSUES • Where does BCM fit in an organization? • Keeping the plan up-to-date • BUSINESS CONTINUITY AND THE CLOUD • LESSONS TO LEARN • CONCLUSION • APPENDIX 1:REFERENECE DATA • APPENDIX 2: TEMPLATES • BIA questionnaire template • Threat / risk questionnaire template About the Author: STUART HOTCHKISS CISSP, CISA, CISM, ABCP, PMP is a Business Consultant at Hewlett Packard, based in Geneva. He has 30+ years’ experience in IT in various areas from development to marketing, and has worked for the last 16 years in security and business continuity. |