Who uses it
It suits banks, insurers, utilities, telecoms and other providers of essential services.
How it is applied
- Important business services and their tolerance for disruption are identified.
- People, systems and suppliers behind each service are mapped.
- Scenarios are tested against those tolerances.
- Weak points are fixed and the results reported to the board.
Cost drivers
The number of important services and their dependencies drives the cost. Scenario testing takes staff time each year.
Timeline
A first programme usually runs over several months. The work then continues as systems and threats change.
Certification
No certificate is issued for this area alone. Organisations usually certify the continuity part against ISO 22301.
