Standards
| 1. A Standard is a set of specifications or guidelines used to ensure that a product, service or process does what it is supposed to do. It is a document that establishes uniform engineering or technical specifications, criteria, methods, processes, or practices.
Related Terms: ISO22301, SS540, BS25999, ANZ5050, NFPA1600, MS1970, ASIS.
| |||||||||||||||||||||
|
(Source: Business Continuity Management Institute - BCM Institute) |
These are some related BCM standards:
Contents |
International or Country Specified
High Level Auditable BCM Standards
- British Standards Institute (BSI) BS25999 BS 25999 - Business Continuity
- Singapore Standard SS540
- Singapore (SPRING) launches new certifiable standard SS540:2008 which replaces TR 19:2004
- SI 24001:2007
- Security and continuity management systems – Requirements and guidance for use of the Standards Institution of Israel (SII)
- FFIEC Guidelines
- ISO/PAS 22399:2007
- Societal security - Guideline for incident preparedness and operational continuity management
- Australian and New Zealand Business Continuity Management standard : AS/NZS 5050:2010
- ISO 22301 BCM Standard
- ANSI Business Continuity Management Standard
High Level Non-auditable BCM Standards
- Bank of International Settlements, High-level principles for business continuity, Summary, Aug 2006
- National Fire Protection Association NFPA 1600, Standard on Disaster/Emergency Management and Business Continuity Programs
- CSA Z1600 Standard on Emergency Management and Business Continuity Programs
- Standards Australia, HB 292-2006 begin_of_the_skype_highlighting 292-2006 end_of_the_skype_highlighting A practitioners guide to business continuity management
- Standards Australia, HB 221:2004 Business Continuity Management
- ASIS International - Organizational Resilience: Preparedness and Continuity Management - Best Practices Standard
High Level Related Standards
- ISO 27001
- Malaysia Standard MS1970:2007 Business Continuity Management Framework
- Singapore Standard SS507:2004
- ISO/PAS 23399 - Incident Preparedness and Operational Continuity Management
- Australia/ New Zealand Standard, AS/NZS 4360:2004 (Australian/New Zealand Standard)
- The AS/NZS 4360 is the only internationally accepted risk management standard. The Standard provides a generic guide for establishing and implementing the risk management process involving identification, analysis, assessment, treatment and continuous risk monitoring.
- HIPPA
- COBIT 4.1 2007
- ITIL 2008 SCM: Disaster Recovery Self-Assessment
- NASD 3510
- NYSE 446
- NAIC for Business Continuity
IT Disaster Recovery Standards
- BS 25777:2008
- Information and communications technology continuity management Code of practice
- ISO 24762:2008/
- Guidelines for ICT and disaster recovery services
- SS507:2008
- Guidelines for ICT and disaster recovery services
- SI 24001:2007
- Security & Continuity Management Systems (Israel)
Central Bank Specified
- AUSTRALIA: Australian Prudential Regulation Authority (APRA) Guidance Note AGN 232.1 - Risk Assessment and Business Continuity Management
- Key Highlights: Guidelines for authorised deposit-taking institutions when implementing the Prudential Standard APS 232 business continuity management.
- BAHAMAS: Central Banks of the Bahamas Business Continuity Guidelines: Consultative Paper PU26-0606, 6 Nov 2006
- BARBADOS: Central Bank of Barbados, Operational Risk Guideline, June 2007
- HONG KONG: Hong Kong Monetary Authority (HKMA), Supervisory Policy Manual, TM-G-2 - Business Continuity Planning
- Key Highlights: The HKMA's BCP Supervisory Policy Manual sets out the HKMA's supervisory approach to BC planning and the sound practices which the HKMA expects authoritzed institutions to take into consideration.
HKMA Supervisory Policy Manual TM-G-2 (v.1 - 02.12.02)
- JAPAN:Bank of Japan
- KENYA: Central Bank of Kenya, Central Bank of Kenya (CBK) pridential Guideline on Business Continuity Management (BCM) for Institution Licensed under the Banking Act
- Key Highlights: This guidance Note TM-G-2 requires financial institutions to implement and maintain their business continuity plans.
- LATVIA: Bank of Latvia (Latvjas Banka)
- MALAYSIA: Bank Negara Malaysia (BNM), [1]Guidelines on Business Continuity Management Guidelines for Banking Institutions BNM/RH/GL 013-3, 30 July 2008
- MALTA: Central bank of Malta, Directive No 6: HARMONISED CONDITIONS FOR PARTICIPATION IN TARGET2-MALTA - Guidelines on Business Continuity and Contingency procedures Appendix IV, 2008
- PAKISTAN: State Bank of Pakistan (SBP); Risk Management - Guidelines for Commercial Banks & DFIs
- Key Highlights: The State Bank of Pakistan requires Commercial Banks & DFIs to have business continuity plans.
- PHILIPPINES:Bangko Sentral ng PilipinasCircular Letter 10 Mar 2001
- POLAND: National Bank of Poland Business continuity of payment and securities settlement systems infrastructure
- Key Highlights: The Bangko Sentral ng Pilipinas requires Financial Institutions to have business continuity plans validated and submitted to the Central Bank.
- RUSSIA: Central Bank of the Russian Federation (STO BR IBBS-1.0-2006)
- SINGAPORE: Monetary Authority of Singapore (MAS), Business Contunity Management Guidelines June 2003
- Key Highlights: A consultation paper with seven principles for Business Continuity Planning. In June 2003 The Monetary Authority of Singapore (MAS) published Business Continuity Guidelines to regulated institutions (the banking, insurance, securities and futures industries). The guidelines are sound BCM principles and institutions are encouraged to accept and adopt the sound principles, and develop implementation plans taking into consideration their business activities and operating environment.
- Singapore Stock Exchange Business Continuity Policy Rule 4.6.21 dated 22 January 2009
- SRI LANKA: Insurance Board of Sri Lanka Guidelines on Business Continuity Plan
- THAILAND: Bank of Thailand (BOT), 118/2550 - Submitting Policy Statement on Business Continuity Management (BCM) and Business Continuity Plan (BCP) of Financial Institutions, January 2007
- Key Highlights: This guidelines (translated from Thai) requires Financial Institutions to have business continuity plans. Policy statement requires business continuity management and includes establishing policies, standards and operating procedures of the entire organization.
- UNITED KINGDOM: FSA, Business Continuity Practice Guides, Nov 2006
- Key Highlights: Read the Resilience Benchmarketing Project: Discussion Paper June 2008.
Energy Specified
- FERC COOP 2007 Continuity of Operations Plan
- FERC RM01-12-00
- NERC CIP 002-009 2006

