Autres normes, standards d'audit, de sécurité et de qualité informatique, des systèmes d'information

Autres normes

BS 25999 / BCM

Le BSI - British Standard a publié la norme BS 25999, Business Continuity Management, qui se compose de deux documents :

BS 25999-1:2006 : BCM - Partie 1 : Code de bonne pratique
BS 25999-2:2007 : BCM - Partie 2 : Spécifications.

BS 25999-1:2006
Selon le BSI :"is a code of practice that takes the form of guidance and recommendations. It establishes the process, principles and terminology of business continuity management (BCM), providing a basis for understanding, developing and implementing business continuity within an organization and to provide confidence in business-to-business and business-to-customer dealings. In addition, it provides a comprehensive set of controls based on BCM best practice and covers the whole BCM lifecycle. "

Il contient 10 chapitres:

Scope and applicability

Terms and definitions

Overview of business continuity management (BCM)

The business continuity management policy

BCM program management

Understanding the organization

Determining business continuity strategy

Developing and implementing a BCM response

Exercising, maintaining and reviewing BCM arrangements

Embedding BCM in the organization’s culture.

BS 25999-2:2007
Selon le BSI : "specifies requirements for establishing, implementing, operating, monitoring, reviewing, exercising, maintaining and improving a documented Business Continuity Management System (BCMS) within the context of managing an organization’s overall business risks."

"BS 25999-2 can be used by internal and external parties, including certification bodies, to assess an organization’s ability to meet its own business continuity needs, as well as any customer, legal or regulatory needs."

Ainsi, un organisme peut se faire certifier conforme BS 25999-2:2007.

Comme d'autres standards de système de management, ce standard applique le modèle Plan - Do - Check - Act (PDCA) pour développer, installer et améliorer l'efficacité d'un système BCM d'une entreprise.