Table of Contents

Introduction; 1: Introducing Business Continuity Management; 2: Overview of the BCM Process; 3: Business Impact Analysis and Risk Assessment; 4: Business Continuity Strategy; 5: Business Continuity Procedures; 6: Exercising and Testing; 7: Performance Evaluation; 8: Improvement Non-conformity and corrective action; 9: BCM Culture; 10: Document Management and Control; 11: Reporting and Assurance; 12: Certification; 13: Standards and Codes of Practice; Bibliographyl Appendix 1: A BCM Policy; Appendix 2: BCM Competencies; Appendix 3: A Risk Register; Appendix 4: A Crisis Management Team; Appendix 5: A Communication Cascade; Appendix 6: Document Templates; Appendix 7: A Document Register; Appendix 8: Acronyms and Abbreviations; ITG Resources

About the Author

Tony Drewitt has specialised in operational risk management and business continuity management since 2001, working with small, medium and large organisations to help them develop their BCM policies, strategies and plans. Tony was one of the first practitioners to achieve certification under BS25999 (for a client in 2008) and is currently working with several organisations to develop management systems in line with BS25999 and ISO22301. He has written several books on business continuity, including BS25999: A Pocket Guide, A Manager's Guide to BS25999 and Everything You Want to Know About Business Continuity, all published by ITGP.