Information and Advice on Standards

The Business Continuity role in adapting to climate change

Environment Agency - Climate Adaptation Last winter heavy rain, storm force winds and large waves combined with high spring tides presented England with unprecedented flooding from the sea, rivers, groundwater and surface water.

Thousands of properties were flooded, infrastructure was damaged and tragically, eight people lost their lives. The full impact of these events has not yet been calculated but we do know that 175,000 businesses in England are at risk of flooding [note1].  

Government sets the bar for Cyber Risk with Cyber Essentials

Cyber essentials scheme Logo Department of Business, Innovation & Skills Minister, Right Hon David Willetts MP, has announced the certification framework for Cyber Essentials, the governments new initiative aimed at creating a minimum expected capability for cyber security.  

HMG announces Cyber Essentials Scheme



As part of the UK government's long-term strategy to address the increasing threats around cyber risk HMG has announced its Cyber Essentials Scheme.

Department for Business, Innovation & Skills

The scheme identifies and focuses on five principal areas that businesses of all types and sizes must consider as "the essential" foundation of their cyber security.

Introducing Standards

This is a short introduction to the world of Standards outlining how they are developed. 

A standard is a document defining best practice, established by consensus and approved by a recognized body (such as BSI, ANSI or ISO). Each standard is kept current through a process of maintenance and review whereby it is updated, revised or withdrawn as necessary.

Supply Chain Continuity using new ISO 22318 Guidelines

New guidance from ISO and the BSI to help companies build resilience and continuity in their supply chains PD ISO/TS 22318:2015 - Overview of new ISO Supply Chain Continuity Guidance

An Introduction by Lead author Duncan Ford MBCI

BSi has just published the UK edition of the recently released ISO Technical Specification 22318 Guidelines for Supply Chain Continuity. The title describes where this document fits in with the established BCM standards 22301 and 22313.  A technical specification is not a full standard; its purpose is to amplify not undermine the established standards.

Every organisation has a supply chain which may range from the purchase of basic resources to complex outsourcing arrangements for the delivery of a core service including both external suppliers and internal support such as the provision of IT services.  Each of these arrangements presents a risk to the organisation if it is unavailable, which needs to be properly understood and appropriate contingency measures put in place to protect against disruption of that product supply or service. 22318 provides guidelines on how to manage Supply Chain Continuity challenges.

The scope of this Technical Specification was deliberately constrained. It considers specifically the issues faced by an organisation which needs continuity of supply of products or services to protect its business activities and the continuity strategies for current suppliers which can be used to mitigate the impact of disruption.

The approach is broken into five stages which align with the requirements of BS/ISO 22301 which ensures that Supply Chain Continuity Management (SCCM) can be managed within an established BCM programme:

Ø  Policy and strategy which considers the requirement for supply chain continuity and the parameters each organisation should define to frame its approach to SCCM.

Ø  Analysis of the supply chain which draws upon the organisation’s BIA to identify critical activities or processes and focusses on identifying the particular risks and impacts to these processes arising from disruption in the associated supply chain.

Ø  Consideration of appropriate and achievable Supply Chain Continuity strategies which can help to mitigate the emerging risks and identify an approach to manage disruption.

Ø  Planning to manage a supply chain disruption event and the requirement to integrate this with BC plans.

Ø  Ongoing performance management to maintain an appropriate level of continuity management within the supply chain and deliver continuous improvement.

Effective SCCM generates its own challenges for an organisation, it may impact procurement strategies as continuity requirements may be contrary to strategies of minimising supply chain cost.  The process of analysis should bring a focus onto the pressure points, for example where a critical process is dependent on a single supplier, and allow the associated risk to the organisation to be recognised and managed.

A key approach is to encourage openness between an organisation and its critical suppliers delivering better understanding of each other’s priorities and risks and integrated continuity planning. This leads to continuous improvement and reducing risk.

SCCM is relevant to organisations of every size and type, TS 22318 focusses on a key aspect of managing the risks in the supply chain.

As an ISO document it is available as reference to support global supply arrangements helping the purchaser to define its continuity requirements to be included in contracts, monitor suppliers’ continuity provisions and be prepared to manage the impacts of disruption. The hope of the project team who worked on this document supported by the contributions from many global standards organisations is that PD ISO/TS 22318 takes another step towards improved global continuity and resilience.

To get a copy of the new Supply Chain Continuity Guidance please click here

Visit the BSI shop to get your copy of BS/ISO 22318

About the Author


Duncan Ford led the development for ISO TS 22318. He is a partner in Corpress LLP a consultancy working in the areas of risk, response and resilience including supply chain analysis.

For more information visit:


Continuity and Resilience Conference | London | EC2 | 16th Sept

Continuity and Resilience Conference | London | Sept 16



The BSI in partnership with the NFPA, City of London, and ISO is holding a free conference on “Continuity and Resilience” at the Guildhall, London, on 16th Sept. 
Topics include BCM certification vs alignment; BIA; supply chain continuity; human aspects of continuity;  crisis management; city resilience; and cyber resilience.  
Everyone is welcome and encouraged to contribute to the discussions.  
Lunch is provided.  
For further information please contact with your details and organization.






Chairman’s opening

Rick Cudworth, Partner, Deloitte

Welcome from  City of London and BSI

Morning Session – Continuity


Business Continuity Management - Overview 

Ken Willette, Division Manager, Public Fire Protection Division, National Fire Protection Association


Business Impact Analysis

Ian Charters,  Continuity Systems, Ltd


Human Aspects of Continuity Management

Lynne Donaldson, HR & Crisis Consultant, Corpress LLP


ISO 22301 Certification or Alignment?

John Sharp, Managing Director, Kiln House Associates Ltd

11:10 -11:25

BCM for SMEs

Eric Bekaert, Senior Policy Advisor in Crisis Management, Service of the High Official for Defense and Security – Ministries of Economy and Finance


Morning Networking Tea & Coffee break

Extended Networking Session and Lunch


Cyber Risk and Resilience

Russell Price, Chair, Continuity Forum

Simon Guilderson, Senior Director, Alvarez & Marsal


City Resilience

Speaker Dr. Robert MacFarlane, Assistant Director, UK Resilience Training and Doctrine

Cabinet Office, Civil Contingencies Secretariat 


Guidance on organizational resilience – focus on ISO 22316 –

Organizational Resilience

James Crask, Enterprise Resilience, PwC


Afternoon Networking Tea & Coffee break


ISO Panel discussion

The panel will comprise ISO TC 292 Work Group 2 members who will consider key topics highlighted by conference participants


Chairman’s summary

Rick Cudworth, Partner, Deloitte


Event closes


For further information please contact with your details and organization.


Industry Award for the Cyber Essentials scheme

Cyber Essentials Scheme
The government backed Cyber Essentials scheme has been recognised with the Editors Award from SC Magazine. The scheme was developed by BIS and CESG to help businesses put in place practical measures that have been proven to help protect against cyber risk following an extensive period of industry consultation. 

BS 12999 | Draft For Comment | Damage management

BSI Standards development The BSI has been working to produce standaised Guidance for Damage Management that outlines the processes followed to facilitate the reinstatement and future integrity of affected public, commercial or domestic property, contents, facilities and assets, in the event of an incident or peril that causes damage.  The consultation closes at the end of April 2015.

This code of practice called BS 12999 builds on the already recognized BDMA Standards and connects and supports other standards covering Business Continuity and Recovery Management . 

PAS 7000 EVENT Briefing | Managing and mitigating supply chain risk

Link to BSIPAS 7000 Launch: Breakfast Briefing

New Supply Chain Standard to Uncover and Mitigate Supply Chain Risks

Tuesday 4 November 2014 (Free)

VENUECentral London

TIME: 8.30am to 10.30am (registration starts at 8.00am)

BSI Organizational Resilience Standard BS 65000 DPC - comment now

BS 65000 Organization Resilience Standard
For the past few years one of the BSI committees has been working to develop a guidance standard that can be used by organisations to better direct, inform and support their Organizations and positively impact on its resilience.
The Standard known as “BS 65000:2014 Guidance on organizational resilience” has challenged the author group and been through extensive revisions before finally getting to the Public comments stage. 

BIS Cyber Hygiene Profile - CALL FOR REVIEW

BIS CYBER HYGIENE PROFILE DRAFT REVIEW - COMMENTS NEEDEDFeedback is needed from industry on the first draft of the Cyber Hygiene Profile developed by BIS and intended to identify the basic cyber controls that should be present in business.
The current draft can be viewed and comments submitted through the BSI’s Draft Review System and the review will close on the 16th March, 2014.

BIS Cyber Risk developments aim to build UK Capacity in SME's

In March 2013, the UK Department for Business, Innovation and Skills issued a “Call for Views and Evidence”  that built on the commitments made in the 2011 Cyber Security Strategy published by government.

The Call for Evidence focused on the intention of government to encourage the adoption of industry led standards that can be used by organisations to  improve the management of cyber risk. The particular focus of this work stream, that is part of a series of connected developments across business and government, was centred on the needs of SME companies.

National Occupation Standards for Business Continuity - your feedback needed

National Occupation Standards for Business Continuity
Since 2011 the Continuity Forum has been working with Skills CFA to develop Business Continuity skills and qualifications for use in the workplace. 
We are now conducting a review of the Business Continuity Management (BCM) suite of National Occupational Standards (NOS).

Shaping Cyber Risk management for the UK | are you playing your part?

Can you help create a framework for Cyber Risk management for the UK?
The Department of Business, Innovation and Skills (BIS) is looking at how to help business improve its management of Cyber Risk through a process of industry engagement that is trying to identify how standards can be used in this process. 

The future for ISO 31000 | TC 262 Risk Management Survey | Standards

BSI Home pageISO Home page
The future of ISO 31000
Risk Management

We would really like your contribution to the future developemnt of ISO 31000 – Risk management - Principles and guidance and ISO Guide 73 - Risk management- Terminology.  These important ISO guidance documents are currently being considered for revision and the ISO technical committee, TC/262 – Risk Management –responsible for this work and the BSI has established a group to obtain feedback from risk professionals, users of the standards, and other relevant stakeholders.  
Your input into this review is very important and will be fed directly into ISO TC/262.
We are looking for your thoughts and use of Risk Management standards to help us develop a better understanding of how ISO 31000 can evolve and what aspects could be developed further. 
For more details please contact the Continuity Forum here or call Sara McKenna on +44 (0) 208 993 1599

Syndicate content

Business Continuity Forum creating Resilince and security

Creating Continuity... Building Resilience...