Almost perfect timing for BS ISO 31030:2021 Guidance for organizations
It has taken nearly ten years for an idea shared at a British Standards meeting in London to grow and develop into a full International Standard. The story of how the standard emerged is a great example of how industry professionals can work together to share experience and build solutions that can help address serious issues. The new guidance from ISO and the BSI sets a new standard for travel risk management that will help organizations of all types get back to work and build business travel confidence.
Modern business takes our people all over the world, but for some the experience of the jet set lifestyle can quickly transform into a nightmare if things go wrong. A serious illness, traffic accident, mugging or theft can quickly throw a business travellers’ plans into chaos and expose them and their employer to even greater risks and potential harm. Yet most business travellers and their employers these risks are rarely thought through, and this leads many struggling to cope when the inevitable happens. This happens to hundreds of thousands of people each year, but it doesn’t have to be this way and in a post-covid world we must do more to minimise travel risk of all types.
Almost perfect timing for BS ISO 31030:2021 Guidance for organizations
It has taken nearly ten years for an idea shared at a British Standards meeting in London to grow and develop into a full International Standard. The story of how the standard emerged is a great example of how industry professionals can work together to share experience and build solutions that can help address serious issues. The new guidance from ISO and the BSI sets a new standard for travel risk management that will help organizations of all types get back to work and build business travel confidence.
Modern business takes our people all over the world, but for some the experience of the jet set lifestyle can quickly transform into a nightmare if things go wrong. A serious illness, traffic accident, mugging or theft can quickly throw a business travellers’ plans into chaos and expose them and their employer to even greater risks and potential harm. Yet most business travellers and their employers these risks are rarely thought through, and this leads many struggling to cope when the inevitable happens. This happens to hundreds of thousands of people each year, but it doesn’t have to be this way and in a post-covid world we must do more to minimise travel risk of all types.
For the past three years work has been underway to develop new guidance to help organizations meet their Duty of Care for travellers. National Standards Bodies from more than 60 countries have been working with the ISO technical committeee for Risk Management (TC262) to agree a good practice framework that helps keep people safer and provides evidence that the organization is meeting its’ legal duties.
The Continuity Forum has been directly engaged in the work on the guidance at the national and international levels, as well as developing active sector engagement through our Policy Working Group (PWG).
Better engagement and services are needed for the SME sector
Despite the progress made on the implementation of BCM within organizations over nearly two decades, the depth and breadth of planning in smaller firms remains a cause of concern.
These businesses are the backbone of the economy employing more people and delivering the essential ingredients of modern life in all its flavours.
The ISO Technical Committee for ISO 19600 relating to Compliance Management is preparing to discuss whether a revision of this standard should take place and, if so, how it can be improved.
To support this review a survey has been developed to gain feedback from both users and non-users of the standard looking at compliance management. You can help contribute to the decision making process by providing feedback and opinion by following the link below:
The International Standard ISO 19600:2014 Compliance management systems – Guidelines were published in 2014 as a Management System Standard. The standard does not specify requirements, but provides guidance on compliance management systems and recommended practices.
ISO 19600 can be used by numerous standards covering Risk, Information Technology, Business Continuity and Resilience Management to identify just a few. The guidance it provides is intended to be adaptable, and the use of this guidance can differ depending on the size and level of maturity of an organization’s compliance management system and on the context, nature and complexity of the organizations activities, including its compliancy policy and objectives.
You do not need to be a user of ISO standards either as the flexibility provided through the guidance can help with other processes or management systems. ISO 19600:2014 is based on the principles of good governance, proportionality, transparency and sustainability.
The deadline for completing the survey is Monday 16thApril 2018.
A major new British Standard [BS 31111] is in development to help senior executives and risk managers improve their cyber risk management and build the cyber resilience of their organizations.
Over the past year, the BSI Risk Management Committee has been working on developing new guidance that aims to help top executives better understand and manage the technology risks to their organizations.
Many of the survey’s 700-plus respondents agreed that mass notification has become a critical business tool, and although advanced features are great, usability and reliability are even more important.
To dig deeper, you can download the full report with commentary on the findings and lots of colorful charts and graphs.
What to do in the event of a terrorist Fire & Weaspons attack
The National Police Chiefs’ Council have launched advice on what the public should do in the event of a terrorist attack. Attacks in the UK and abroad remind us all of the terrorist threat we face, which in the UK is considered as ‘severe’, meaning an attack is highly likely.
Police and security agencies are working tirelessly to protect the public but it is also important that communities remain vigilant and aware of how to protect themselves if the need arises.
The attacks in Paris on 13th November and London on 7/7 show the planning and preparation spent by terrorists and other groups in gathering information to assist with the target selection and operational planning. Any thought that these events occur by chance or on a whim should be banished.
Risk, Business Continuity and Resilience - are we getting the landscape right?
Imagine trying to describe or just outline what a Rhinoceros looks like to someone when you have only have seen a small part of the whole animal yourself, perhaps just a foot or an ear.
When you haven't seen the whole thing it makes it awkward at best, perhaps even impossible. Its certainly rather tricky eh? You could end up with a Donkey, a three toed Camel or indeed a host of bizarre critters. To describe a Rhino properly you have got to step back and get the whole picture. (We know this is usually done with elephants, but we prefer a rhino for this analogy... its an ear thing!)
We’re using this example to illustrate one of the most interesting topics emerging across the Risk and Business Continuity Sectors - Organizational Resilience!
A lot of people are talking about it and the discussion underway is really interesting.
An Introduction to Cyber Risk and the Cyber Essentials Scheme - Video
This is a short 5 minute video that rather light heartedly provides a basic introduction to Cyber Risk. It isn't technical and aims to help build awareness of Cyber Risk has evolved and introduces the UK Cyber Essentials Scheme.
If you would like to know more about our work covering Cyber Risk then get in touch.
You can also find out more about the special Cyber Risk and Insurance Forum by clicking on the link in the menu bar.
Future Learn has launched 3 new free cyber security online training courses, funded by the National Cyber Security Programme.
The courses are aimed at all levels, from young people through to existing employees, and represent an excellent opportunity to develop skills in the IA arena.
Dentons is a global law firm driven to provide clients a competitive edge in an increasingly complex and interconnected world. A top 20 firm on the Acritas 2013 Global Elite Brand Index, Dentons' clients benefit from approximately 2,600 lawyers and professionals in more than 75 locations spanning 50-plus countries across Africa, Asia Pacific, Canada, Central Asia, Europe, the Middle East, Russia and the CIS, the UK and the US.
The Firm serves the local, regional and global needs of a broad spectrum of clients, including private and public corporations; governments and government agencies; small businesses and start-ups; entrepreneurs; and individuals.
Last winter heavy rain, storm force winds and large waves combined with high spring tides presented England with unprecedented flooding from the sea, rivers, groundwater and surface water.
Thousands of properties were flooded, infrastructure was damaged and tragically, eight people lost their lives. The full impact of these events has not yet been calculated but we do know that 175,000 businesses in England are at risk of flooding [note1].
Department of Business, Innovation & Skills Minister, Right Hon David Willetts MP, has announced the certification framework for Cyber Essentials, the governments new initiative aimed at creating a minimum expected capability for cyber security.
For the past three years work has been underway to develop new guidance to help organizations meet their Duty of Care for travellers. National Standards Bodies from more than 60 countries have been working with the ISO technical committeee for Risk Management (TC262) to agree a good practice framework that helps keep people safer and provides evidence that the organization is meeting its’ legal duties.
Despite the progress made on the implementation of BCM within organizations over nearly two decades, the depth and breadth of planning in smaller firms remains a cause of concern.
A major new British Standard [BS 31111] is in development to help senior executives and risk managers improve their cyber risk management and build the cyber resilience of their organizations.
When you haven't seen the whole thing it makes it awkward at best, perhaps even impossible. Its certainly rather tricky eh? 
