1 minute read
4 Context of the organization
Think about how what happens outside and inside your organization affects your business and whether your BCMS can do what it needs to do. Consider these things when you’re setting up and running your BCMS.
4.2 Understanding the needs and expectations of interested parties
4.2.1 General
When you create your BCMS, you need to find out
Who has an interest in it What these people need
4.2.2 Legal and regulatory requirements
Create a procedure to make sure that you know, and write down, what laws and regulations you need to comply with when preparing for business continuity and take these into account when setting up and running your BCMS. Keep your knowledge up to date and tell everyone that needs to know.
4.3 Determining the scope of the business continuity management system
4.3.1 General
Work out what is and isn’t covered by your BCMS then write it down. Don't forget to think about those things that happen inside and outside of your organization, those people with an interest in your business continuity we mentioned earlier in this section, and what your organization wants to, and has to, achieve.
4.3.2 Scope of the BCMS
You need to
Say which parts of your organization are within scope of the BCMS
Say which products, services and activities are covered by the BCMS
If you leave anything out of scope you need to say why, and you can’t leave anything out that is needed for other areas within scope, or that is needed to provide business continuity.
4.4 Business continuity management system
Create, run and regularly improve an BCMS as described by this standard, including the processes mentioned.
