With the application and popularization of computers, the business model has undergone tremendous changes, and people's working methods have also undergone fundamental changes. The use of computers has greatly improved work efficiency and saved a lot of manpower and material resources. People are more and more dependent on computers in production and life, and the security requirements of information systems are also gradually increasing.
Business continuity refers to an organization's ability to maintain and recover business during and after a disaster. Disasters here can include extreme weather, fire, floods, natural disasters, theft, IT failures, employee illness or terrorist attacks. The business continuity management system framework can help enterprises formulate a complete set of integrated management process plans, enable enterprises to identify and analyze potential disasters, help them determine the threat to enterprise operations caused by possible shocks, and provide an effective management Mechanisms are in place to prevent or counteract these threats and reduce losses to the business from catastrophic events.
In 2007, the guidance document ISO/PAS 22399 "Accident Response and Continuity Management" was successfully released. In 2012, ISO 22301 was published, as a truly international standard, ISO 22301 references important recommendations from Australia, France, Germany, Japan, North Korea, Singapore, Sweden, Thailand, the United Kingdom and the United States. In 2013, my country adopted and issued the national standard "Requirements for Public Safety Business Continuity Management System" (GB/T 30146), which was implemented on May 1, 2014. ISO 22301 specifies requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining and continually improving a documented business continuity management system to implement protection, reduce the likelihood of disruptions, and when disruptions occur Prepare, respond and recover from time to time. Business continuity should also include risk assessment and business impact analysis, which are an intrinsic and fundamental part of ISO 22301, are the identification of priority activities, key products and services that should be supported by dependencies and resources whose failure will have consequences for the organization Impact.
GB/T 30146 "Public Safety-Business Continuity Management System Requirements" defines business continuity management as a set of management processes that identify potential threats to an organization and the impact that these threats may have on business operations if they occur. This process provides a framework for organizations to build self-resilience to effectively respond to threats to protect the interests of key stakeholders, reputation, brand and value-creating activities.
