BS 25999-1:2006 establishes the process, principles and terminology of business continuity management (BCM). The purpose of this Standard is to provide a basis for understanding, developing and implementing business continuity within an organization and to provide confidence in the organization's dealings with customers and other organizations. It also enables the organization to measure its BCM capability in a consistent and recognized manner.

BS 25999-1:2006 provides a system based on BCM good practice.

BS 25999-1:2006 is intended for use by anyone with responsibility for business operations or the provision of services, from top management through all levels of the organization; from those with a single site to those with a global presence; from sole traders and small-to-medium enterprises (SMEs) to organizations employing thousands of people. It is therefore applicable to anybody who holds responsibility for any operation, and thus the continuity of that operation.

BS 25999-1:2006 does not cover the activities of emergency planning inasmuch as that topic relates to civil emergencies.

NOTE Ultimately, no matter how much effort or resource is invested in business continuity management, an organization could still be faced with an incident or combination of incidents it did not forsee.



Cross References:
BS EN ISO 9000
BS ISO/IEC 20000-1
BS ISO/IEC 20000-2
BS ISO/IEC 27001
PAS 77
Civil Contingencies Act 2004