Implementation as work products
The BCMS implementation path
7 chapters put decisions, responsibilities and evidence in a defensible order.
- 01
Start
Define the mandate and scope
Make leadership, the target picture, the scope and interfaces binding.
Expected work products
- BCM policy
- Scope and objectives
- Role and interface matrix
Based on: BSI, ISO
- 02
Foundation
Prepare the methodology and inventory
Define services, time steps, damage categories and the survey process consistently.
Expected work products
- Service inventory
- BIA methodology
- Interview and approval process
Based on: BSI, ISO
- 03
Prioritise
Run the BIA
Determine time-critical services, target times, minimum level and critical resources.
Expected work products
- BIA results
- RTO/RPO requirements
- Dependency overview
Based on: BSI, ISO
- 04
Decide
Decide on risks and BC strategies
Assess outage scenarios and select funded solutions.
Expected work products
- BCM risk analysis
- Strategy decisions
- Action plan
Based on: BSI, ISO
- 05
Enable
Build the response and plans
Establish alerting, the dedicated response organisation and actionable plans.
Expected work products
- Emergency manual
- Business continuity plans
- Recovery plans
Based on: BSI
- 06
Rehearse
Exercise and refine
Test roles, assumptions and solutions with increasing complexity.
Expected work products
- Exercise programme
- Exercise concepts
- Evaluations and actions
Based on: BSI, ISO
- 07
Operate
Steer and improve performance
Bring metrics, audits, changes and management decisions into a control loop.
Expected work products
- BCMS metrics
- Audit and review plan
- Management review
Based on: BSI, ISO