News

The Business Continuity role in adapting to climate change

Environment Agency - Climate Adaptation Last winter heavy rain, storm force winds and large waves combined with high spring tides presented England with unprecedented flooding from the sea, rivers, groundwater and surface water.

Thousands of properties were flooded, infrastructure was damaged and tragically, eight people lost their lives. The full impact of these events has not yet been calculated but we do know that 175,000 businesses in England are at risk of flooding [note1].  

Government sets the bar for Cyber Risk with Cyber Essentials

Cyber essentials scheme Logo Department of Business, Innovation & Skills Minister, Right Hon David Willetts MP, has announced the certification framework for Cyber Essentials, the governments new initiative aimed at creating a minimum expected capability for cyber security.  

Government funding for SME and start up Computer Security

CESG innovation scheme provides £5000 for business cyber risk management The government has extended the Innovation Voucher scheme that supports SMEs, entrepreneurs and early stage start-ups by implementing or improving cyber security.

The scheme provides flexibility and allows firms to choose from a ange of approved suppliers.  Successful applicants will receive up to £5000 from the Innovation Scheme. 

IPCC 2014 stresses importance of Risk Management in meeting Climate challenge

Climate Adaptation and Business Continuity - an essential connection

These videos introduce the 2014 Intergovernmental Panel on Climate Change Report.  The findings of Working Group Two focuses on Vulnerability, Impacts and Adaptation.
 
These are central themes of not only the latest thinking on how best to meet the Climate Change Challenge, but go to the heart of the work of Risk and Business Continuity professionals across business around the world.
 

Video Animation introducing the Smart Guide to Climate Adaptation

Climate Adaptation and Business Continuity - an essential connection

This short video introduces the Smart Guide - Adapting to Climate Change using your Business Continuity Management System.
 
The guide has been published by BSI in partnership with Climate Ready following our research over the past two years where one of the common requests was for more clarity on how to integrate Climate Adaptation factors into the Business Continuity and Risk Management processes.  
 

Making your Business Climate Ready - Guide for Business Continuity Professionals

Get Involved - Continuity Forum Climate Adaptation Programme
 
Business Continuity Management Professionals have a new tool to help understand and manage the challenge of Climate Change. 
 
“Adapting to Climate Change using your Business Continuity Management System” is a new publication developed by the Environment Agency in partnership with Climate Ready and that has been published by the BSI.
 

HMG announces Cyber Essentials Scheme

 

 

As part of the UK government's long-term strategy to address the increasing threats around cyber risk HMG has announced its Cyber Essentials Scheme.

Department for Business, Innovation & Skills

The scheme identifies and focuses on five principal areas that businesses of all types and sizes must consider as "the essential" foundation of their cyber security.

Webcast "Introducing the Climate Adaptation Programme"

Webcast Climate Adaptation and Business Continuity - an essential connection

This webcast introduces the Continuity Forums Climate Adaptation Programme (CAP)
 
The Climate Adaptation Programme is a core project that focuses on more effectively connecting Risk and Business Continuity Management with Climate Adaptation.
 
In this Webcast we provide an introduction to the reasons behind the project and share a brief outline of the activities and benefits planned. 
 

3PQ - Business Continuity Third Party Questionnaire - Project Page

Business Continuity 3PQ supply chain questionnaire
  • Q. What is 3PQ?
  •  
  • Simply a consistent Third Party Questionnaire that can be used freely by Business Continuity Professionals to help manage Supply Chain BCM Capability.
 
The 3PQ project group was formed through the efforts of a number of experienced BCM professionals from the Business Continuity Group BANG! and supported by the Continuity  Forum.    
 
The 3PQ Supply Chain Questionnaire Master Document will be hosted by the Continuity Forum and will be freely available for download from this page. 
 

Compliance Management | ISO 19600 review and survey

ISO - International Standards Organization
The ISO Technical Committee for ISO 19600 relating to Compliance Management is preparing to discuss whether a revision of this standard should take place and, if so, how it can be improved.
 
To support this review a survey has been developed to gain feedback from both users and non-users of the standard looking at compliance management. You can help contribute to the decision making process by providing feedback and opinion by following the link below:
 
 
The scope of ISO 19600
 
The International Standard ISO 19600:2014 Compliance management systems – Guidelines were published in 2014 as a Management System Standard. The standard does not specify requirements, but provides guidance on compliance management systems and recommended practices.
 
ISO 19600 can be used by numerous standards covering Risk, Information Technology, Business Continuity and Resilience Management to identify just a few.  The guidance it provides is intended to be adaptable, and the use of this guidance can differ depending on the size and level of maturity of an organization’s compliance management system and on the context, nature and complexity of the organizations activities, including its compliancy policy and objectives.
 
You do not need to be a user of ISO standards either as the flexibility provided through the guidance can help with other processes or management systems. ISO 19600:2014 is based on the principles of good governance, proportionality, transparency and sustainability.
 
The deadline for completing the survey is Monday 16th April 2018.
 

Consultation on review of ISO Business Continuity Standards | Urgent

URGENT | Review of ISO 22301:2012 and ISO 22313:2012 – have your say!BSI Survey | Revision of ISO 22301 & 22313 | Business Continuity

 

For standards to remain relevant and keep up with the needs of industry they need to be reviewed and updated on a regular basis and after five years the time has come for the International Standards for business continuity management to be put under the spotlight to examine whether there are any revisions or amendments required.

As part of this process we are seeking the views from the community of standards users, from auditors and those who are certified, to those who align to it. This is your chance to help ensure that both the standard specification for ISO 22301 and the guidance available in ISO 22313 are delivering what is needed for stakeholders.

Please click on this link https://www.surveymonkey.co.uk/r/ISO-22301-17 and take the short survey to assist us with understanding the appetite for amendments and revision. The survey should take less than 10 minutes and will close on the 29th August 2017.

 

NOW CLOSED 

 


Revision of ISO 31000 Risk Management Guidelines - Draft available

 
International Standard Risk Management ISO 31000 Draft ReviewISO 31000, the international standard for Risk Management - ‘Risk Management – Principles and Guidelines’ - is now available for public consultation. 
 
The decision to review ISO 31000 was taken at in Chicago in 2013 and now, 4 years later, a draft version of the proposed updates to the ISO 31000 document is available for users to see.
 
The next steps will be a review of the comments submitted that will modify the text further and then a ballot by ISO members to move to the final publication.  The next ISO meeting is being held in San Francisco in July 2017 and this suggests publication of the revised risk management standard perhaps early in 2018. 
 
The draft of the standard for review and comment is now available on the BSI Draft Review system at https://standardsdevelopment.bsigroup.com/projects/76477a8f8de94a1e1d5c675e02973077. [registration required - Closing date for comments 11th April 2017] 
 
Click to Visit and View BSI DRAFT REVIEW SYSTEM
 

Supply Chain Continuity using new ISO 22318 Guidelines

New guidance from ISO and the BSI to help companies build resilience and continuity in their supply chains PD ISO/TS 22318:2015 - Overview of new ISO Supply Chain Continuity Guidance

An Introduction by Lead author Duncan Ford MBCI

BSi has just published the UK edition of the recently released ISO Technical Specification 22318 Guidelines for Supply Chain Continuity. The title describes where this document fits in with the established BCM standards 22301 and 22313.  A technical specification is not a full standard; its purpose is to amplify not undermine the established standards.

Every organisation has a supply chain which may range from the purchase of basic resources to complex outsourcing arrangements for the delivery of a core service including both external suppliers and internal support such as the provision of IT services.  Each of these arrangements presents a risk to the organisation if it is unavailable, which needs to be properly understood and appropriate contingency measures put in place to protect against disruption of that product supply or service. 22318 provides guidelines on how to manage Supply Chain Continuity challenges.

The scope of this Technical Specification was deliberately constrained. It considers specifically the issues faced by an organisation which needs continuity of supply of products or services to protect its business activities and the continuity strategies for current suppliers which can be used to mitigate the impact of disruption.

The approach is broken into five stages which align with the requirements of BS/ISO 22301 which ensures that Supply Chain Continuity Management (SCCM) can be managed within an established BCM programme:

Ø  Policy and strategy which considers the requirement for supply chain continuity and the parameters each organisation should define to frame its approach to SCCM.

Ø  Analysis of the supply chain which draws upon the organisation’s BIA to identify critical activities or processes and focusses on identifying the particular risks and impacts to these processes arising from disruption in the associated supply chain.

Ø  Consideration of appropriate and achievable Supply Chain Continuity strategies which can help to mitigate the emerging risks and identify an approach to manage disruption.

Ø  Planning to manage a supply chain disruption event and the requirement to integrate this with BC plans.

Ø  Ongoing performance management to maintain an appropriate level of continuity management within the supply chain and deliver continuous improvement.

Effective SCCM generates its own challenges for an organisation, it may impact procurement strategies as continuity requirements may be contrary to strategies of minimising supply chain cost.  The process of analysis should bring a focus onto the pressure points, for example where a critical process is dependent on a single supplier, and allow the associated risk to the organisation to be recognised and managed.

A key approach is to encourage openness between an organisation and its critical suppliers delivering better understanding of each other’s priorities and risks and integrated continuity planning. This leads to continuous improvement and reducing risk.

SCCM is relevant to organisations of every size and type, TS 22318 focusses on a key aspect of managing the risks in the supply chain.

As an ISO document it is available as reference to support global supply arrangements helping the purchaser to define its continuity requirements to be included in contracts, monitor suppliers’ continuity provisions and be prepared to manage the impacts of disruption. The hope of the project team who worked on this document supported by the contributions from many global standards organisations is that PD ISO/TS 22318 takes another step towards improved global continuity and resilience.

To get a copy of the new Supply Chain Continuity Guidance please click here

Visit the BSI shop to get your copy of BS/ISO 22318

About the Author

 

Duncan Ford led the development for ISO TS 22318. He is a partner in Corpress LLP a consultancy working in the areas of risk, response and resilience including supply chain analysis.

For more information visit: www.corpress.uk

 

Industry Award for the Cyber Essentials scheme

 
Cyber Essentials Scheme
 
The government backed Cyber Essentials scheme has been recognised with the Editors Award from SC Magazine. The scheme was developed by BIS and CESG to help businesses put in place practical measures that have been proven to help protect against cyber risk following an extensive period of industry consultation. 
 

Managing risk, insurance and terrorism - Counting the Cost Guide

Counting the Cost 

Terrorism and other critical events, whatever their source or form, will always have social and economic consequences. This is why it is important that businesses consider how they can prevent, handle and recover from an attack, which usually arrives swiftly and unannounced.

The plans that you put in place to help you manage the risks involved can be both immediate and longer-term. Managing these risks effectively can help you to keep your business trading.

What is this guide about?

Counting the cost provides guidance and information that will help you, as a business, to protect yourself.

It will enable you to:

  • risk-assess the security and resilience needs of your business;

  • recognise threats and hazards; and

  • understand better the role of insurance.

    This guide also includes clear diagrams, easy-to-follow step-by-step help, links to useful websites and checklists. All of these will aid you in identifying your security and resilience needs. Click the image below to open the PDF file.

  •  

Counting the Cost  - NaCTSO Advice on managing risk, insurance and Counter terrorism

More help

Reading this guide in conjunction with its two sister documents – Expecting the unexpected and Secure in the knowledge – will give you the basic knowledge and skills required to protect your business.

You may also wish to read the National Counter Terrorism Security Office (NaCTSO) security guides. Please check the resource pages or visit NaCTSO here


 
Syndicate content

Business Continuity Forum creating Resilince and security

Creating Continuity... Building Resilience...