BCM-03—Planning business continuity
>Control Description
Based on the business impact analysis, a single framework for operational continuity and business plan planning will be implemented, documented and enforced to ensure that all plans are consistent. Planning is based on established standards, which are documented in a "Statement of Applicability".
Business continuity plans and contingency plans take the following aspects into account:
• Defined purpose and scope with consideration of the relevant dependencies;
• Accessibility and comprehensibility of the plans for persons who are to act accordingly;
• Ownership by at least one designated person responsible for review, updating and approval;
• Defined communication channels, roles and responsibilities including notification of the customer;
• Recovery procedures, manual interim solutions and reference information (taking into account prioritisation in the recovery of cloud infrastructure components and services and alignment with customers);
• Methods for putting the plans into effect;
• Continuous process improvement; and
• Interfaces to Security Incident Management.
Additional criteria: -
Ask AI
Configure your API key to use AI features.