Skip over navigation
Ultima Risk Management Logo linking to homepage
  • Contact us
  • Site map
  • Home
  • Consultancy
    • Introduction
    • Information Security (ISO 27001)
    • Business Continuity Management (BS 25999)
    • PCI DSS
    • IT Service Management (ITIL & ISO 20000)
    • Data Protection
    • Information Risk Management
    • Software Asset Management
    • Polices & Procedures
  • Training
    • Training Courses
    • CISMP - ISEB Certificate in Information Security Management Principles
    • PCBCM - ISEB Practitioner Certificate in Business Continuity Management
    • PCIRM - ISEB Practitioner Certificate in Information Risk Management
    • SAM - ISEB Certificate in Software Asset Management Essentials
    • PCSAM - ISEB Practitioner Certificate in Software Asset Management
    • BCM - BCI Understanding BCM Principles and Good Practice
    • All other courses
    • Training Schedule
  • Products
    • ISO 27001 Risk Assessment Tool
    • BS 25999 Risk Assessment Tool
  • Events
    • BS 25999 Implementation Seminar
  • Case Studies
    • Audatex - Global first Dual certification
  • About us
    • Company Profile
    • URM's Partners
    • How to contact us
Home / Consulting / BS 25999 / Significance of BS 25999
getting the balance right
Getting the Balance Right

BS 25999 Embedding BCM in the organisation's culture

A key requirement of BS 25999 is that BCM becomes an integral element of an organisation’s core values and gives confidence to stakeholders in the ability of the organisation to cope with disruptions. Within BS 25999 this stage is represented as embracing all of the other stages. However, in URM’S experience two key contributing factors are senior management engagement and staff training and awareness programmes. It is argued that the most successful BCM is driven top down where senior management has been involved at all stages from scoping, through business impact analyses, strategy setting and making provisions for regular testing.

URM also believes an often neglected area of BCM is staff training and awareness. Often seen as time consuming for both trainers and trainees, training often ends up as a low priority activity. However, the key in URM’s estimation is in the selection of delivery method e.g. person to group training, web based training, self led CBT, group discussion etc etc. By matching the method to the learning objective, budget, audience and training content one can achieve an optimal training/awareness programme.

Back to lifecycle overview
  • Introduction
  • Information Security (ISO 27001)
  • Business Continuity Management (BS 25999)
    • Significance of BS 25999
    • How to deploy BS 25999 - Lifecycle Stages
    • Crisis Management Simulation Exercises
  • PCI DSS
  • IT Service Management (ITIL & ISO 20000)
  • Data Protection
  • Information Risk Management
  • Software Asset Management
  • Polices & Procedures

Copyright © Ultima Risk Management, 2008. All Rights Reserved.

contact us | careers | terms of use | privacy | site map