BS 25999-1:2006 is a code of practice that takes the form of guidance and recommendations. It establishes the process, principles and terminology of business continuity management (BCM), providing a basis for understanding, developing and implementing business continuity within an organization and to provide confidence in business-to-business and business-to-customer dealings.

In addition, it provides a comprehensive set of controls based on BCM best practice and covers the whole BCM lifecycle.

BS 25999-1:2006 has been developed by practitioners throughout the global community, drawing upon their considerable academic, technical and practical experiences of BCM. It has been produced to provide a system based on good practice for BCM.

It is intended to serve as a single reference point for identifying the range of controls needed for most situations where BCM is practiced in industry and commerce, and to be used by large, medium and small organizations in industrial, commercial, public and voluntary sectors.

BS 25999 will be published in two parts:

• BS 25999-1:2006 Code of practice for business continuity management
• BS 25999-2:2007 Specification for business continuity management.

BS 25999-2:2007 will specify the process for achieving certification that business continuity capability is appropriate to the size and complexity of an organization

Contents

Foreword
Scope and applicability
Terms and definitions
Overview of business continuity management (BCM)
The business continuity management policy
BCM programme management
Understanding the organization
Determining business continuity strategy
Developing and implementing a BCM response
Exercising, maintaining and reviewing BCM arrangements
Embedding BCM in the organization's culture
References