Skip to main content

2.3 Business Continuity Policy

No: 381000058504 Date(g): 27/2/2017 | Date(h): 1/6/1438 Status: In-Force
Principle 
 
A business continuity policy should be defined, approved and communicated to relevant stakeholders. 
 
Objective 
 
To document the Member Organization’s commitment and objective of the business continuity program, and to communicate this to the relevant stakeholders. 
 
Control considerations 
 
1.A business continuity policy should be defined, approved, implemented and communicated
 
2.The business continuity policy should at the minimum identify:
 
 a.Objectives
 
 b.Scope
 
 c.Responsibilities
 
3.The compliance with the business continuity policy should be monitored .
 
4.The effectiveness of policy implementation should be measured and periodically evaluated.
 
5.Scope exclusions for the BCM should be documented and periodically evaluated. The justifications for scope exclusions should be documented and approved by BCM committee and senior management.