Select Appropriate Business Continuity Standards
3 slides · 1 min read · Domain 1
Select Appropriate Business Continuity Standards
An organization that wishes to implement a Business Continuity Plan (BCP) can either build the plan independently or use wellknown industry standards either as a reference or adopt the standard in its entirety.
The following are a few of the BC standards in widespread use today:
National Institute of Standards and Technology Special Publication 800-34
The NIST SP800-34, Contingency Planning Guide for Federal Information Systems, provides instructions, recommendations, and considerations for federal information system contingency planning.
International Organization of Standardization (ISO) 22300 Series
The ISO 22300 series are standards that define the requirements and guidelines of implementing a Business Continuity Management System in an organization. The series is composed of various standards, including:
- ISO 22300:2018 Security and resilience - Vocabulary
- ISO 22301:2019 Security and resilience - Business continuity management systems - Requirements
- ISO 22313:2013 Security and resilience - Business continuity management systems - Guidance on the use of ISO 22301
- ISO/TS 22315:2015 Societal security - Business continuity management systems - Guidelines for business impact analysis (BIA)
The organization may also have to meet requirements for BC and DR capabilities specified by legal, regulatory, or contractual compliance processes that it is answerable to.
The nature of these compliance requirements and their sources may play a significant role in shaping how the organization must plan for continuity and disaster recovery.