BCM-01.02B

Policies and procedures for the cloud service's business continuity management, including strategy and guidelines, business impact analyses, and business continuity plans, are documented, communicated, and made available in accordance with SP-01 regarding the following aspects:

1. Goals of the BCM;

2. Roles and responsibilities, management commitment;

3. Scoping of the BCM, identifying relevant business processes;

4. Interfaces, in particular to Incident Management;

5. Communication with relevant entities and competent authorities;

6. Methodology;

7. Consideration of Risk;

8. Business Impact Analysis (BIA);

9. Business Continuity Plan (BCP);

10. Resource Planning (usually part of the BCP);

11. Testing of Business Continuity Plans and regular updates to BCM documentation; and

12. Continuous improvement of the Business Continuity Management.

Supplementary information

Please note: BCM can be integrated into enterprise risk management (ERM) to gain more efficiency and overcome management silos.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)