Though many business continuity standards emphasize the importance of tracking corrective actions to address identified issues, the recently published ISO 22301 (and previously BS 25999-2) also requires conducting a root cause analysis – looking not just [...]
As the GDPR comes into effect, many marketers are scrambling to align their online marketing strategies to the regulation. Unfortunately, like most regulations, there are many requirements that are confusing or ambiguous; one of [...]
Management involvement is not the only driving force behind repeatable, organizational performance. Short, concise policy statements also set expectations and drive consistent performance. Consequently, Riskonnect finds that regardless of the size or culture of an organization, [...]
The introduction of ISO 22301 (Societal security – Requirements – Business continuity management system) more closely aligns business continuity to the broader risk management discipline. A major contributor to this alignment is the standard’s [...]
In today’s business environment, the fundamental ideas behind business continuity management are widely understood. Organizations understand that there are risks and threats from which they need to protect their employees, office space, customers, data [...]
This perspective provides an overview of the Business Continuity Institute’s Professional Practice 5 (PP5) – Implementation, which is the professional practice that “executes the agreed strategies and tactics through the process of developing the [...]
Many organizations think that effective business continuity planning is synonymous with great plan documentation. It’s not. Yes, plan documentation is extremely important. BUT… many organizations fail to recognize that effective business continuity plans – [...]
This article provides an overview of Professional Practice 4 (PP4) – Design, which is the professional practice that “identifies and selects appropriate strategies and tactics to determine how continuity and recovery from disruption will [...]
Business continuity planning is inherently cross-functional with a necessity to address risks to an organization’s product and service offerings, as well as the resources necessary to meet obligations. As organizations increasingly rely on a [...]
This perspective takes a look at one element of Clause 9.3, the management review (a process that Riskonnect feels is one of the most valuable elements of ISO 22301). ISO 22301 is the first [...]
