What is ISO/TS 22332 about?
ISO/TS 22332 discusses security and resilience. ISO/TS 22332 provides guidelines for developing and maintaining business continuity plans and procedures. ISO/TS 22332 applies to all organizations regardless of type, size, and nature whether in the private, public, or not-for-profit sectors, that wish to develop effective business continuity plans and procedures consistently.
The purpose of ISO/TS 22332 is to provide organizations with:
- Detailed methods to develop business continuity plans and procedures
- A structured approach to collect and organize information to develop plans and procedures
- Advice for maintaining plans and procedures over time to establish a continuous improvement environment
Who is ISO/TS 22332 for?
ISO/TS 22332 on security and resilience with business continuity management is useful for:
- CEOs, CFOs, manging directors
- Risk analysts
- Risk operations managers
- Business continuity manager
- Audit and assurance supervisors
Why should you use ISO/TS 22332?
A business continuity plan provides guidance and information to assist teams responding to a disruption in order to meet expectations regarding the delivery of products and services. The organization should create plans and procedures to address communications, emergency management, incident response, crisis management, recovery and restoration.
ISO/TS 22332 provides guidelines for developing and maintaining business continuity plans and procedures. ISO/TS 22332 is consistent with the requirements in ISO 22301 and the guidance in ISO 22313 and is applicable to the performance of any business continuity plan development, or as part of a business continuity management system (BCMS).
Following these guidelines of ISO/TS 22332 will lead to the:
- Establishment of a management structure to respond to a disruption, appointing competent and responsible personnel and teams with the authority to manage the response
- Implementation and maintenance of response processes addressing the protection of life and assets
- Establishment of command and control of the recovery effort following the onset of the disruption
- Implementation and maintenance of communication and warning procedures, including those necessary to manage the media response and coordination with other interested parties throughout a disruption
- Continuity or recovery of disrupted business activities and unavailable resources within predetermined time frames, including procedures necessary to return business activities from the temporary measures adopted during the incident to normal operations
- Recovery of disrupted technology assets
- Establishment of procedures to maintain capabilities and response readiness such as cross-training and exercising
Overall, ISO/TS 22332 helps you to prepare your organization to handle any disruptions that may arise in the future and maintain stability in its operations.
