BS 25999

BS 25999 is BSI's standard in field of Business Continuity Management (BCM). This standard replaces PAS56, a Publicly Available Specification, published in 2003 on the same subject.

Structure

The BS 25999 series includes two standards. The first, "BS 25999-1:2006 Code of Practice for BCM", establishes its processes, principles and terminology. The second, "BS 25999-2:2006 A Specification for BCM", is a concrete standard on which certification would be granted, and specifies the requirements for the implementation of business continuity controls.

Certification (independent inspection) is available from the authors of this standard (BSI Group).

Contents

The contents of the code of practice (BS 25999-1) are as follows:

• Scope
• Structure
• Terms
• BCM
• Overview
• The BCM system
• Understanding the organization
• BCM strategies
• Developing and implementing a BCM response
• Exercising, maintenance, audit and self-assessment of the BCM culture
• Building a BCM culture
• Types and methods of exercising BCM strategies.

Timelines

The first part of BS 25999 (BS 25999-1:2006) was published by the British Standards Institute in December 2006 and is now available for purchase. The second part of BS 25999 is still being drafted by the Technical Committee and it is anticipated that it will be published as a draft version for public comment (DPC) in Spring 2007. The draft version will be reviewed after the DPC consultation period has ended and any comments received during the DPC process will be considered by the BSI and the Technical Committee. It is anticipated that second part of the standard will be published in the Autumn of 2007.

Certification (independent inspection) is available from the authors of this standard BSI.

See also

• Information Assurance

External links

• BS 25999 Source from BSI Download supply of current versions.
• BS 25999 News Portal dedicated to reporting events surrounding BS 25999.
• PAS56 and BS25999 The original portal dedicated to PAS56 and BS 25999.