First part of business continuity standard published

Publication of the first part of business continuity standard BS25999 by the British Standards Institution (BSI) has been hailed as an important step towards companies being able to demonstrate their ability to cope with major threats such as fires, flooding, terrorism and disruption to utilities.

The BSI said that part one of the standard established the process, principles and terminology of business continuity management. It also provided a comprehensive set of controls based on "best practice" that would help organisations to develop and implement a business continuity plan.

According to recent research only 49% of organisations have a business continuity plan covering critical business activities. Small businesses are the least prepared for disaster, with only 40% having a plan.

It is hoped that the standard will act as a framework, so that those without a continuity plan can quickly put one in place, and those that already have a plan can make sure it is up to scratch.

Demonstrating proficiency

However, as Alan Trueman Norwich Union Risk Services' business continuity specialist explained, the move also paves the way for major progress in another vital area of the business continuity process.

Part two of the standard should provide organisations with a more efficient and robust way of ensuring that their partners and suppliers also have the correct procedures in place.

"Firms currently have no quick and easy way of knowing whether organisations which are vital to them in terms of delivery of goods or services are adequately prepared for disaster," said Mr Trueman.

"Part two of the new standard, which is now on course to be introduced next year, will allow for an audit process and certification - meaning that organisations will be able to clearly demonstrate to others that they are meeting the standard."

Unprecedented interest

According to the Business Continuity Institute (BCI), which has been involved in the development of the new standard, there has been unprecedented interest in BS25999.

Chris Green, vice-chair of the BCI said he had been "thrilled" to learn that over 5,000 copies of the draft version of the standard had been downloaded from the BSI website.

"It is worth noting that the BSI has never had more than 250 downloads for any other draft standard, meaning that business continuity management is twenty times more popular," he said. "This really shows the rise of interest in business continuity management around the world."

Part one of the standard can now be purchased from BSI. The 44-page standard, officially designated BS 25999-1:2006 and entitled ‘Business Continuity Management – Part 1: Code of practice’, currently costs £90 (excluding VAT).

Further information is available via the BSI website - see link above/right.