PAS 56:2003 pdf download PAS 56 Guide to Business Continuity Management
1 Scope
This PAS establishes the process, principles and terminology of BCM, describes the activities andoutcomes involved, provides recommendations for good practice and outlines evaluation criteria. Itis applicable to all organizations, regardless of size or industry sector.
2 Terms and definitions
For the purposes of this PAS the following teris and definitions apply2.1
assurance
activity and process whereby an organization can verify and validate its BCM capability
2.2
backlog processing
the processing of work that has built up due to a disruption in a mission critical activity (MCA)2.3
business continuity management (BCM)
holistic management process that identifies potential impacts that threaten an organization andprovides a framework for building resilience and the capability for an effective response thatsafeguards the interests of its key stakeholders, reputation, brand and value-creating activities
24
business continuity planning
advance planning and preparation which is necessary to identify the impact of potential losses, toformulate and implement viable continuity strategies. and to develop continuity plan(s) whichensure continuity of organizational services in the event of an incident
NOTE The deliverable from business continuity planning is a business continuity plan(BCP) which is a documented collection of procedures and information that is developed,compiled and maintained in readiness for use in an incident.
25
business impact analysis (BIA)
managemment analysis by which an organization assesses the quantitative (e.g. financial, servicelevels) and qualitative (e.g.operational,reputational. legal, requlatory) impacts and loss that mightresult if that organization were to suffer a major incident, and the minimum level of resourcerequired for recovery (business impact resource recovery analysis BIRRAT)NOTE The findings from a BIA are used to make decisions and justify a business continuityplanning strategy and solution.
2.6
business response work area
work space shared by a limited number of organizations that require facilities to be obtained andinstalled for recovery
27business risk
risk that internal and external factors, such as inability to provide a service or product, or a fall indemand for an organizations products or services, will result in unexpected loss
2.8
corporate governance
system by which the directors and officers of an organization are required to carry out theiraccountabilities and responsibilities for ensuring that effective management systems, includingfinancial monitoring and control systems, have been put in place to protect assets, earning capacityand the reputation of the organization
NOTE For example, all UK listed companies on the London Stock Exchange are required tocomply with corporate governance code of conduct
2.9
crisis management
process by which an organization manages the wider impact of any incident until it is either undercontrol or contained without impact to the organization or until the BCP is invoked
2.10
dedicated work area
work space provided for sole use by a single organization, configured ready for use
2.11
emergency response
initial response to any incident, focused on protecting human life and the organization’s assets
2.12
end-to-end
in entirety. from start to finish
2.13
exclusion zone
geographical zone agreed between a client and a third party provider of work area recovery (WAR)resources within which the third party provider will not provide WAR services to another client