iso 27001 clause 17 - is aspects of business continuity management

12
iFour Consultancy ISO 27001 - Control A17 - IS aspects of Business Continuity Management

Upload: pooja-soni

Post on 15-Apr-2017

247 views

Category:

Technology


0 download

TRANSCRIPT

iFour ConsultancyISO 27001 - Control A17 - IS aspects of Business Continuity Management

Software application development India - http://www.ifour-consultancy.com/

1

Business Continuity Management(BCM) is a managementprocess that identifies risk, threats and vulnerabilities that could impact an entity's continued operations and provides a framework for building organizational resilience and the capability for an effective response.

Business continuity plan sets out in detail how a particular strategy will be implemented in order to meet the defined requirements. It is intended to be used at the point at which an incident has occurred.IntroductionSoftware application development India

Software application development India - http://www.ifour-consultancy.com/2

Business Continuity PlanSoftware application development India

Software application development India - http://www.ifour-consultancy.com/

Obtaincommitment and authority from institutional Leadership. High level support is essential for building the cross functional teams that are needed to prepare and deploy the plan.Establisha planning team for each business unit.Performa risk assessment in each unit.Identifycritical resources:People Identify all support staff, and establish a chain of succession for key personnel.Places Identify key buildings, and plan alternate locations for workers and equipment.Systems Perform a business impact analysis to prioritize systems in terms of criticality.Other Identify other critical assets required for normal business operations.Determinecontinuity and recovery strategies within each unit.Trainstudents, faculty, and staff on what to do in case of a disaster.Test, test, test!Test system recovery procedures. Generate scenarios and simulate them with table top exercises.Createa communication plan.Reviewthe business continuity plan annually.

3

ObjectiveInformation security continuity shall be embedded in the organizations business continuity management systemsInformation Security Aspects of Business ContinuitySoftware application development India

Software application development India - http://www.ifour-consultancy.com/4

A17 IS aspects of business continuity managementSoftware application development India

Software application development India - http://www.ifour-consultancy.com/5

Information Security Continuity shall be embedded in the organizations business continuity management systems

17.1.1 Planning information security continuity17.1.2 Implementing information security continuity17.1.3 Verify, review and evaluate information security continuity17.1 Information Security ContinuitySoftware application development India

Software application development India - http://www.ifour-consultancy.com/6

Controls for Information Security ContinuitySoftware application development India

Software application development India - http://www.ifour-consultancy.com/

7

To ensure availability of information processing facilities

17.2.1 Availability of information processing facilities17.2 RedundanciesSoftware application development India

Software application development India - http://www.ifour-consultancy.com/8

Controls for Information TransferSoftware application development India

Software application development India - http://www.ifour-consultancy.com/9

Referenceshttp://www.pivotpointsecurity.com/blog/iso-27001-2013-business-continuity-iso-22301/https://en.wikipedia.org/wiki/ISO/IEC_27001:2013https://issuu.com/public-it/docs/isms23003_business_continuity_plan?e=7139440/30461539https://spaces.internet2.edu/display/2014infosecurityguide/Information+Security+Aspects+of+Business+Continuity+Management

Software application development India

Software application development India - http://www.ifour-consultancy.com/10

Visit- http://www.ifour-consultancy.comOr http://www.ifourtechnolab.comFor more detailsSoftware application development India

Software application development India - http://www.ifour-consultancy.com/

11

Thank You Software application development India

Software application development India - http://www.ifour-consultancy.com/

12