Foreword

This British Standard was published by BSI and came into effect on so November 2007. It was prepared by Panel BCM/1/-/2, under the authority of Technical Committee BCM/1, Business continuity management. A list of organizations represented on this committee can be obtained on request to its secretary.

This British Standard has been developed by practitioners throughout the business continuity community, drawing upon their academic, technical and practical experiences of business continuity management (BCM). It has been produced to define requirements for a management systems approach to business continuity management based on good practice for use in large, medium and small organizations operating in industrial, commercial, public and voluntary sectors.

BS 25999 , Business continuity management, is published in two parts:

— Part 1: Code of practice;
— Part 2: Specification.

The requirements specified in this British Standard have been developed with due regard for the principles and practices contained within BS25999-1.

This British Standard provides a specification for use by internal and external parties, including certification bodies, to assess the organization’s ability to meet regulatory, customer, and the organization’s own requirements.

This British Standard contains only those requirements that can be objectively audited. Those organizations requiring more general guidance on a broad range of business continuity management issues are referred to BS 25999‑1.

Demonstration of successful implementation of this British Standard can therefore be used by an organization to assure interested parties that an appropriate business continuity management system is in place.

In common with modern management system standards this standard utilizes the Plan-Do-Check-Act (PDCA) cycle for developing, implementing, and improving the effectiveness of an organization’s business continuity management system.

This publication does not purport to include all the necessary provisions of a contract.

Users are responsible for its correct application.

Compliance with a British Standard cannot confer immunity from legal obligations.

Amendments/corrigenda issued since publication

Date	Text affected

BS 25999-2:2007 (USA Edition)

Business continuity management - Specification

Current

Published:

20 Nov 2007