vista infosec white

Business Continuity (ISO22301)

Ensure availability of business operation

Business Continuity (ISO22301)

Business Continuity Management is a process that involves developing a strategy to prevent and recover from an unforeseen event of incidents like fire, flood, or cyber-attack. The process involves drawing out detailed procedures and instructions for organizations to follow in an event of disasters. This will involve determining all the possible kinds of risks that could potentially impact business operations. It is meant to help organizations continue with their operations even in the course of a major event or disaster. Business Continuity Plan is often interchangeably used with the Disaster Recovery Plan. However, it is important to note that they are different from a Disaster Recovery Plan which typically focuses on the recovery of a company’s IT system after a crisis. Read more about Business Continuity Plan Vs Disaster Recovery plan from our blog section for more details.

Enquire

    Our Approach to Business Continuity (ISO22301)

    Initial Study

    We begin with understanding your business, core activities, and single point of failure.

    Scope Definition

    Our team will together with your management help you in scope definition which includes setting timelines, responsibilities, and budget for the implementation.

    Gap Analysis

    Our team scans your organization’s system to identify critical assets and processes

    Business Impact Analysis (BIA)

    We then move on to initiate Business Impact Analysis (BIA) to identify your critical services, cost of downtime, and interdependencies. It is in this phase that the RPO/RTO are identified.

    Risk/Threat Analysis

    our team performs a Risk/Threat Analysis to identify a single point of failure and critical dependencies.

    BCM Strategy

    Based on the findings of the Risk Analysis, our team identifies a suitable BCM strategy that can be implemented at various levels in your organization.

    User Awareness Training

    We then conduct User Awareness Training for your employees on their individual responsibilities concerned with the BCM

    Response Strategy

    An integral part of our approach is the Response Strategy Phase which includes developing and implementing Business Continuity Management response based on the Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO).

    BCM Testing

    Finally, the whole BCP is put to test with customized walkthroughs and simulations. The BCM is then evaluated and improved based on the results from these tests.

    Certified with External Auditors

    Once all controls are confirmed to be in place, we help you get certified with external auditors (of your choice) for ISO22301.

    Pre-Assessment

    After a reasonable gestation period, a separate team of experts conduct a Pre-assessment of your setup.

    Continual support

    If you wish, we can take over the responsibility for Continually Supporting (Managed Compliance Services) your organization to stay certified.

    Why work with VISTA InfoSec?

    Frequently Asked Questions on Business Continuity (ISO22301)

    Business Continuity Co-coordinators are typically responsible for the development and maintenance of a Business Continuity Plan. They closely work with the critical business management team to understand the processes, identify risks, and provide solutions to manage and minimize risks.

    ISO 22301 is an international standard established for Business Continuity Management. The standard is a practical framework for developing and managing an effective Business Continuity Management system. The standard established aims to safeguard organizations from potential incidents, threats, or disasters.

    ISO20000 on the other hand is a certifiable standard. It is by and large derived from the key requirements of ITIL. So, from the branding perspective, then ISO20000 is always a good choice.

    Business Continuity Plan refers to the process of designing strategy and procedures to ensure continuity of business operation even after the disruption. Whereas, Disaster Recovery Plan is just a part of the larger picture of Business Continuity Management which is more specific to restoring vital systems and getting technical operations back to normal.

    Best approach is to do a Gap Analysis and BIA (Business Impact Analysis). This will help you understand your critical processes, interdependencies and cost of downtime. Armed with this information, you can take an informed call as to for what processes you would like the Business Continuity / Disaster Recovery Plans to be developed.

    Business Continuity Plan should be reviewed, evaluated, and updated every year, and whenever there are significant changes introduced in context to personnel, system, operating software, or recovery strategies. As an industry best practice, BCP drills have to be done atleast once a year. Most importantly, BCP drills have to replicate the envisoned scenarios in the BCP and not just bits and pieces as per convenience.

    Business Continuity Plan is a detailed and documented set of policies, procedures, work instructions, checklists and record formats for organizations to refer to in response to the occurrence of disruption. The process facilitates quick response; minimizes the impact of disruption, and quick recovery and restoration of business operation.

    Dealing with an unforeseen event or disaster becomes a lot easier.
    Ensures continuity of business even after an incident.
    Facilitates quick recovery of operations after a disruption.
    Help reduce cost and save the time of recovery from any disruption.
    Builds customer confidence and trust.
    Ensures Compliance to Regulatory requirements.
    Safeguards company reputation.
    Business Continuity Management $8000.

    Discover our latest resources

    A Pure Play Vendor Agnostic Global Cyber Security Consultant.