Note: not all pages are shown in this sample.
Gap Assessment Tool (Questionnaire Based) BCMS-FORM-00-4
Terms used BCMS = Business Continuity Management System AREA/SECTION
SUB-SECTION
ISO22301 REQUIREMENTS
REQS MET? ACTION NEEDED TO MEET REQ
4 Context of the organization 4.1 Understanding the organization and its context
4.2 Understanding the needs and expectations of interested parties
4.2.1 General 4.2.2 Legal and regulatory requirements
4.3 Determining the scope of the business continuity management system
4.3.1 General 4.3.2 Scope of the BCMS
4.4 Business continuity management system
Have the external and internal issues that affect the BCMS been determined? Has the organization identified and documented its activities, products and services and relationships, and the potential impact of a disruptive event on them?
Yes
Has the context been defined, in terms of objectives, risk criteria and appetite, and the purpose of the BCMS? Have the interested parties and their requirements been identified? Is there a procedure to identify, document and communicate applicable legal and regulatory requirements? Does the BCMS take the applicable legal and regulatory requirements into account? Has the scope of the BCMS been determined and documented? Have exclusions to the scope been documented and explained? Is a BCMS in place and being continually improved?
Yes
Total:
Yes
Yes Yes
Yes Yes Yes Yes
9
ACTION OWNER