AS/NZS 5050:2010 pdf free.Business continuity – Managing disruption-related risk.
The Standard describes the application of the principles, framework and process for risk management, as set out in AS/NZS ISO 31000: 2009, to disruption-related risk. Magaging such risk effectively will help maintain continuity of an organizations business. The approach has drawn on, but of necessity goes beyond, many of the concepts that in the past may have been described as ‘Business Continuity Management’ or ‘BCM’.
The Standard also includes, in Section 5, a schedule of requirements for those organizations seeking or required to demonstrate that their framework and processes for managing disruption-related risk are able to meet the characteristics of management systems as described in ISO Guide 72.
As is the case with AS/NZS ISO 31000, this Standard is applicable to all forms of organization.
1.3.4 Business impact analysis (BIA)
Detailed risk analysis that examines the nature and extent of disruptions and the likelihood of the resulting consequences.
NOTE: May include consideration of the organizations business functions, people, processes, infrastructure, resources, information, interdependencies and the nature and extent of capability loss over time.
1.3.5 Business function
Single process or combination of processes contributing to a final definable output or objective.
NOTES:
I A business function may be a single structural unit of the organization, or may require activity across several structural units.
2 A single structural unit may have responsibility for one or more business functions.
3 A function may be performed by an outsourced or third party provider.
4 May also be referred to as “business activity”.
1. 3.6 Capability
Ability and capacity of people, functions, processes and/or infrastructure to undertake required actions or activities.
1.3.7 Communication and consultation
Continual and iterative processes that an organization conducts to provide, share or obtain information, and engage in dialogue with stakeholders regarding the management of disruption-related risk.
Consultation is a process which impacts on a decision through influence rather than power an input to decision-making, not joint decision-making.
NOTES:
1 The information can relate to the existence, nature, form, likelihood, significance, evaluation,acceptability and treatment of disruption-related risk.
2 Consultation is a two-way process of informed communication between an organization and its stakeholders on an issue prior to making a decision or determining a course of action.