Skip to main content

2.3 Business Continuity Policy

No: 381000058504 Date(g): 28/2/2017 | Date(h): 2/6/1438

Effective from Feb 28 2017 - Feb 27 2017
To view other versions open the versions tab on the right

Principle 
 
A business continuity policy should be defined, approved and communicated to relevant stakeholders. 
 
Objective 
 
To document the Member Organization’s commitment and objective of the business continuity program, and to communicate this to the relevant stakeholders. 
 
Control considerations 
 
1.A business continuity policy should be defined, approved, implemented and communicated
 
2.The business continuity policy should at the minimum identify:
 
 a.Objectives
 
 b.Scope
 
 c.Responsibilities
 
3.The compliance with the business continuity policy should be monitored .
 
4.The effectiveness of policy implementation should be measured and periodically evaluated.
 
5.Scope exclusions for the BCM should be documented and periodically evaluated. The justifications for scope exclusions should be documented and approved by BCM committee and senior management.