Ehdotuksen tiedot

This document defines a process reference model (PRM) for a BCMS aligned to ISO 22301, which will meet the criteria defined in ISO/IEC 33004 for process reference models (see Annex A). This provides guidelines for users of ISO 22301 on the establishment, implementation, maintenance and improvement of the BCMS. It is intended to guide users of ISO 22301 to:

 

— incorporate the process approach as described by ISO 22301:2019 clause 8.1 within the BCMS;

— be aligned to all the work done aligned to other standards of the ISO/IEC 22300 family applicable to Business Continuity (BC) from the perspective of the operation of the BCMS;

— support users in the operation of a BCMS aligned to ISO 22301 – the document will complement the requirements-oriented perspective of ISO 22301 based on risk management with an operational, process-oriented point of view.

 

No additional requirements are included in this document.

 

This document is applicable to all types and sizes of organizations (e. g. commercial enterprises, government or other public agencies and non-profit organizations) which intend to establish, implement, apply, maintain and improve a security management system. It provides a holistic and common approach and is not industry or sector specific. This document can be used throughout the life of the organization and can be applied to any activity, internal or external, at all levels.

 

______________________________________________________