BUSINESS CHALLENGEEvery day our global economy is growing more complex and interdependent. Incidents that occur withinyour own business or ecosystem can slow down or even halt your activity, directly impacting yourcustomers and bottom line. This holds true for the ICT (Information and Communication Technologies)services, healthcare, government and finance sectors, as well as manufacturing. Anticipating ruptureand having a contingency plan in place is essential in order to maintain your business activity no matterwhat happens.

SOLUTIONWhat is BS 25999-2 certification?BS 25999-2 standard provides all the requirements for a Business Continuity Management System.This is a methodology and practice that maintains your business despite adverse conditions,minimizing the impact of potential incidents for your customer base, stakeholders and businessecosystem. It is an efficient way of maintaining security, ensuring corporate governance andcompliance, protecting your image and reputation, as well as creating a climate of confidence withemployees, suppliers, outsourcers, stakeholders and customers.

What are the key benefits?Improve performance in case of property or revenue loss Secure cash flow and legal liability Protect employee safety and moral, corporate brand and image

WHY CHOOSE BUREAU VERITAS?Network - 5,700 skilled auditors operating in more than100 countries offer a unique combination of internationaland local expertise providing consistent serviceswherever our clients are. Expertise - Our auditors have extensive knowledge ofspecific industry sectors, local regulations, markets andlanguage that enables them to provide solutions adaptedto your needs. Recognition - Bureau Veritas Certification is recognizedby more than 40 national and international accreditationbodies across the world. Mark of global recognition - The Bureau VeritasCertification mark is a globally recognized symbol ofyour organization’s ongoing commitment to excellence,sustainability and reliability.

Bureau Veritas Certification Services

BS 25999-2: BUSINESS CONTINUITY MANAGEMENT SYSTEM CERTIFICATION Keep Your Business Running No Matter What Happens.

RELATED SERVICESBeyond BS 25999-2, Bureau VeritasCertification provides a large range ofservices related to risk and supplychain management:

Vericert®: risk based audit approachSupplier and network auditInternal auditSupply chain security: ISO 28000

Integrated Certification Bureau Veritas Certification offers thepossibility of integrated and/or combinedcertification with other schemes such as

ISO 9001, ISO 14001, OHSAS 18001,ISO 27000 (information security)… SQAS, TDGA, ISO/TS 16949, IRIS,AS/EN 9100…

This delivers greater audit efficiency,consistency and optimization.

BS 25999-2

BUREAU VERITASCertification

BS 25999-2_09.qxd 3/06/09 10:35 Page 1

OUR CERTIFICATION PROCESS Key steps in our certification process are:

Definition of certification scopePre-audit (optional): gap analysis and diagnosis ofyour current position against standardCertification audit performed in 2 stages:

- Stage 1 – readiness review performed to verifythat the organization is ready for certification

- Stage 2 – evaluation of implementation,including the effectiveness, of the managementsystem of the organization (policy, businessimpact analysis, risk assessment, BC strategy,incident and management pans, legislation,regulation)

A certificate valid for 3 years is issued uponsatisfactory results of stage 2 auditSurveillance audits to verify that the managementsystem continues to fulfill the requirements of thestandard and monitor the continual improvement Re-certification after 3 years to confirm the continuedconformance and effectiveness of the managementsystem as a whole

FAQ Is the Business Continuity Management System certification stand-alone, or does it integrate withother certifications?BS 25999-2 was designed to be compatible with ISO 9001, ISO 14001 and ISO 27001. BS 25999-2 isbased on a plan-do-check-act management system modelled after the proven ISO 9001 framework.Whereas ISO 9001 helps you smoothly run “business as usual”, Business Continuity ManagementSystem helps you to quickly get back on track after disruptions.

How do you define the scope of Business Continuity Management System?BS 25999-2 recommends that businesses define their Business Continuity Management System scopeand set objectives with regard to their specific requirements for business continuity; organizationalobjectives and obligations; acceptable level of risk, statutory, regulatory and contractual duties; andinterests of their key stakeholders.

In addition to providing Business Continuity Management System certification services, does BureauVeritas Certification provide this type of training?Yes. This is especially beneficial to companies executing internal Business Continuity ManagementSystem audits or to help prepare for a certification. Building internal competencies in BusinessContinuity Management will speed and smooth the adoption of good practices, ultimately leading to aquicker certification.

CONTACTFor details about this service, please contact

Bureau Veritas Certification

By phone: please contact your local officeBy e-mail: certification.contact@bureauveritas.com

FOR MORE INFORMATIONplease visit:

www.bureauveritas.com/scs

CA*CA*

Pre

-aud

it (o

ptio

nal)

Certificateissued

Surveillance audits

Stage 2 audit

Stage 1 audit

Def

init

ion

ofce

rtif

icat

ion

scop

e

Certification audit

** BCMS: Business Continuity Management System* CA: Corrective Action (if necessary)

BCMS**• Planning• Implementing and Operating• Monitoring and reviewing• Maintaining and improving

BS 25999-2

BUREAU VERITASCertification

Cre

dits

: Bur

eau

Veri

tas

- A/

S D

ansk

She

ll

BS 25999-2_09.qxd 3/06/09 10:35 Page 2