Industry Standards

COOP Systems believes that three ISO standards are revolutionizing the BCM industry.  ISO24762:2008(ICT/DR), 31000:2009(Risk), and 22301:2011(BCM) give organizations with quality ambitions a set of clear directions.  The large assortment of local and narrower standards is being trumped.

ISO24762:2008  provides guidelines on the provision of information and communications technology disaster recovery (ICT DR) services as part of business continuity management, applicable to both “in-house” and “outsourced” ICT DR service providers of physical facilities and services.

ISO31000:2009  provides principles and generic guidelines on risk management.  It can be used by any public, private or community enterprise, association, group or individual, not being specific to any industry or sector.  Applicable throughout the life of an organization, and to a wide range of activities, including strategies and decisions, operations, processes, functions, projects, products, services and assets.  It can be applied to any type of risk, whatever its nature, whether having positive or negative consequences.

ISO22301 is an emerging standard for BCM due in 2011.  "Societal Security -- Preparedness and Continuity Management Systems -- Requirements" specifies requirements for setting up and managing an effective Business Continuity Management System (BCMS). Like BS 25999-2, upon which it is largely based, it details requirements for a BCM System and will be auditable, enabling organizations to demonstrate compliance. It is this standard against which certification will be available.