News

Government funding for SME and start up Computer Security

CESG innovation scheme provides £5000 for business cyber risk management The government has extended the Innovation Voucher scheme that supports SMEs, entrepreneurs and early stage start-ups by implementing or improving cyber security.

The scheme provides flexibility and allows firms to choose from a ange of approved suppliers.  Successful applicants will receive up to £5000 from the Innovation Scheme. 

IPCC 2014 stresses importance of Risk Management in meeting Climate challenge

Climate Adaptation and Business Continuity - an essential connection

These videos introduce the 2014 Intergovernmental Panel on Climate Change Report.  The findings of Working Group Two focuses on Vulnerability, Impacts and Adaptation.
 
These are central themes of not only the latest thinking on how best to meet the Climate Change Challenge, but go to the heart of the work of Risk and Business Continuity professionals across business around the world.
 

Video Animation introducing the Smart Guide to Climate Adaptation

Climate Adaptation and Business Continuity - an essential connection

This short video introduces the Smart Guide - Adapting to Climate Change using your Business Continuity Management System.
 
The guide has been published by BSI in partnership with Climate Ready following our research over the past two years where one of the common requests was for more clarity on how to integrate Climate Adaptation factors into the Business Continuity and Risk Management processes.  
 

Making your Business Climate Ready - Guide for Business Continuity Professionals

Get Involved - Continuity Forum Climate Adaptation Programme
 
Business Continuity Management Professionals have a new tool to help understand and manage the challenge of Climate Change. 
 
“Adapting to Climate Change using your Business Continuity Management System” is a new publication developed by the Environment Agency in partnership with Climate Ready and that has been published by the BSI.
 

HMG announces Cyber Essentials Scheme

 

 

As part of the UK government's long-term strategy to address the increasing threats around cyber risk HMG has announced its Cyber Essentials Scheme.

Department for Business, Innovation & Skills

The scheme identifies and focuses on five principal areas that businesses of all types and sizes must consider as "the essential" foundation of their cyber security.

Webcast "Introducing the Climate Adaptation Programme"

Webcast Climate Adaptation and Business Continuity - an essential connection

This webcast introduces the Continuity Forums Climate Adaptation Programme (CAP)
 
The Climate Adaptation Programme is a core project that focuses on more effectively connecting Risk and Business Continuity Management with Climate Adaptation.
 
In this Webcast we provide an introduction to the reasons behind the project and share a brief outline of the activities and benefits planned. 
 

Major new risk and sustainability guidance published

 

Risk & Sustainability | 2023 provides significant guidance for those working in the fields of Risk, Resilience and Sustainability.  It aims to create change across organizations of all types to help deliver effective climate adaptation and sustainability objectives.   The guidance uses a risk-centric approach, based on international standards and industry good practice. 
 
International consensus agrees that the global economy must evolve at scale and pace to address a myriad of issues rooted in climate risks and threats to the sustainability of wider society.
 
Risk & Sustainability | 2023 provides significant guidance for those working in the fields of Risk, Resilience and Sustainability.  It aims to create change across organizations of all types to help deliver effective climate adaptation and sustainability objectives.   The guidance uses a risk-centric approach, based on the principles and framework of ISO 31000, along with other international standards and industry good practice. 

Consultation on review of ISO Business Continuity Standards | Urgent

URGENT | Review of ISO 22301:2012 and ISO 22313:2012 – have your say!BSI Survey | Revision of ISO 22301 & 22313 | Business Continuity

 

For standards to remain relevant and keep up with the needs of industry they need to be reviewed and updated on a regular basis and after five years the time has come for the International Standards for business continuity management to be put under the spotlight to examine whether there are any revisions or amendments required.

As part of this process we are seeking the views from the community of standards users, from auditors and those who are certified, to those who align to it. This is your chance to help ensure that both the standard specification for ISO 22301 and the guidance available in ISO 22313 are delivering what is needed for stakeholders.

Please click on this link https://uk.surveymonkey.com/r/ISO-22301-17 and take the short survey to assist us with understanding the appetite for amendments and revision. The survey should take less than 10 minutes and will close on the 29th August 2017.

 


Revision of ISO 31000 Risk Management Guidelines - Draft available

 
International Standard Risk Management ISO 31000 Draft ReviewISO 31000, the international standard for Risk Management - ‘Risk Management – Principles and Guidelines’ - is now available for public consultation. 
 
The decision to review ISO 31000 was taken at in Chicago in 2013 and now, 4 years later, a draft version of the proposed updates to the ISO 31000 document is available for users to see.
 
The next steps will be a review of the comments submitted that will modify the text further and then a ballot by ISO members to move to the final publication.  The next ISO meeting is being held in San Francisco in July 2017 and this suggests publication of the revised risk management standard perhaps early in 2018. 
 
The draft of the standard for review and comment is now available on the BSI Draft Review system at https://standardsdevelopment.bsigroup.com/projects/76477a8f8de94a1e1d5c675e02973077. [registration required - Closing date for comments 11th April 2017] 
 
Click to Visit and View BSI DRAFT REVIEW SYSTEM
 

Supply Chain Continuity using new ISO 22318 Guidelines

New guidance from ISO and the BSI to help companies build resilience and continuity in their supply chains PD ISO/TS 22318:2015 - Overview of new ISO Supply Chain Continuity Guidance

An Introduction by Lead author Duncan Ford MBCI

BSi has just published the UK edition of the recently released ISO Technical Specification 22318 Guidelines for Supply Chain Continuity. The title describes where this document fits in with the established BCM standards 22301 and 22313.  A technical specification is not a full standard; its purpose is to amplify not undermine the established standards.

Every organisation has a supply chain which may range from the purchase of basic resources to complex outsourcing arrangements for the delivery of a core service including both external suppliers and internal support such as the provision of IT services.  Each of these arrangements presents a risk to the organisation if it is unavailable, which needs to be properly understood and appropriate contingency measures put in place to protect against disruption of that product supply or service. 22318 provides guidelines on how to manage Supply Chain Continuity challenges.

The scope of this Technical Specification was deliberately constrained. It considers specifically the issues faced by an organisation which needs continuity of supply of products or services to protect its business activities and the continuity strategies for current suppliers which can be used to mitigate the impact of disruption.

The approach is broken into five stages which align with the requirements of BS/ISO 22301 which ensures that Supply Chain Continuity Management (SCCM) can be managed within an established BCM programme:

Ø  Policy and strategy which considers the requirement for supply chain continuity and the parameters each organisation should define to frame its approach to SCCM.

Ø  Analysis of the supply chain which draws upon the organisation’s BIA to identify critical activities or processes and focusses on identifying the particular risks and impacts to these processes arising from disruption in the associated supply chain.

Ø  Consideration of appropriate and achievable Supply Chain Continuity strategies which can help to mitigate the emerging risks and identify an approach to manage disruption.

Ø  Planning to manage a supply chain disruption event and the requirement to integrate this with BC plans.

Ø  Ongoing performance management to maintain an appropriate level of continuity management within the supply chain and deliver continuous improvement.

Effective SCCM generates its own challenges for an organisation, it may impact procurement strategies as continuity requirements may be contrary to strategies of minimising supply chain cost.  The process of analysis should bring a focus onto the pressure points, for example where a critical process is dependent on a single supplier, and allow the associated risk to the organisation to be recognised and managed.

A key approach is to encourage openness between an organisation and its critical suppliers delivering better understanding of each other’s priorities and risks and integrated continuity planning. This leads to continuous improvement and reducing risk.

SCCM is relevant to organisations of every size and type, TS 22318 focusses on a key aspect of managing the risks in the supply chain.

As an ISO document it is available as reference to support global supply arrangements helping the purchaser to define its continuity requirements to be included in contracts, monitor suppliers’ continuity provisions and be prepared to manage the impacts of disruption. The hope of the project team who worked on this document supported by the contributions from many global standards organisations is that PD ISO/TS 22318 takes another step towards improved global continuity and resilience.

To get a copy of the new Supply Chain Continuity Guidance please click here

Visit the BSI shop to get your copy of BS/ISO 22318

About the Author

 

Duncan Ford led the development for ISO TS 22318. He is a partner in Corpress LLP a consultancy working in the areas of risk, response and resilience including supply chain analysis.

For more information visit: www.corpress.uk

 

Managing risk, insurance and terrorism - Counting the Cost Guide

Counting the Cost 

Terrorism and other critical events, whatever their source or form, will always have social and economic consequences. This is why it is important that businesses consider how they can prevent, handle and recover from an attack, which usually arrives swiftly and unannounced.

The plans that you put in place to help you manage the risks involved can be both immediate and longer-term. Managing these risks effectively can help you to keep your business trading.

What is this guide about?

Counting the cost provides guidance and information that will help you, as a business, to protect yourself.

It will enable you to:

  • risk-assess the security and resilience needs of your business;

  • recognise threats and hazards; and

  • understand better the role of insurance.

    This guide also includes clear diagrams, easy-to-follow step-by-step help, links to useful websites and checklists. All of these will aid you in identifying your security and resilience needs. Click the image below to open the PDF file.

  •  

Counting the Cost  - NaCTSO Advice on managing risk, insurance and Counter terrorism

More help

Reading this guide in conjunction with its two sister documents – Expecting the unexpected and Secure in the knowledge – will give you the basic knowledge and skills required to protect your business.

You may also wish to read the National Counter Terrorism Security Office (NaCTSO) security guides. Please check the resource pages or visit NaCTSO here


 

UK Government to help Lawyers and Accountants protect against Cyber Attack

Department of Business, Innovation and Skills helps Lawyers and Accountants develop Cyber Risk knowledge Digital Economy Minister Ed Vaizey has announced a new free online training course to help members of the legal and accountancy professions develop the skills they need to protect themselves and their clients from cyber-attacks.
 
Developed by government and industry, the on-line training will also enable lawyers and accountants to advise their clients on the cyber risks to their business. This will help UK businesses protect themselves from information breaches and other threats that could potentially cost them millions of pounds.
 

Heartbleed, BASH and now POODLE - new SSL vulnerability discovered

POODLE Vulnerability discovered in SSL 3.0 Researchers from Google have announced the discovery of another major flaw in Web Security. It has been called POODLE and follows hot on the heels of Bash and Heartbleed. 

 

The vulnerability is rooted in SSL v3.0 that is used as part of the security framework used for encryption across the Internet. The POODLE bug makes it possible for hackers to use a ‘man in the middle’ attack to gain access to data. 

 

BSI Organizational Resilience Standard BS 65000 DPC - comment now

BS 65000 Organization Resilience Standard
 
For the past few years one of the BSI committees has been working to develop a guidance standard that can be used by organisations to better direct, inform and support their Organizations and positively impact on its resilience.
 
The Standard known as “BS 65000:2014 Guidance on organizational resilience” has challenged the author group and been through extensive revisions before finally getting to the Public comments stage. 

Another retailer suffers data theft - Morrisons payroll data stolen


Morrisons suffers data theftWm. Morrison, one of the UK's largest supermarket chains, has had the details of more than 100,000 staff stolen. While far fewer people have been affected by this data theft than in others recently reported.
 
The theft covers the payroll records of staff employed by the company and the firm has stated no customer records have been compromised.
 
Syndicate content

Business Continuity Forum creating Resilince and security

Creating Continuity... Building Resilience...