The world of standards: Order or anarchy?

Andrew Mason, Head of Business Continuity, PricewaterhouseCoopers

Abstract
As the development of many new standards for business continuity (BC) is seen across the globe, there is the danger that some of the benefits of developing an industry code or standard are being eroded. The very definition of the term ‘standard’ — a level of quality or excellence that is accepted as the norm or by which actual attainments are judged — is at risk as the proliferation and diversification of standards in existence and under development today continue to grow almost unchecked. This article seeks to provide a personal view on the necessity of an international certifiable standard within the BC industry, with the hope that it will influence the debate in this area. In this manner, the article contributes to the international evolution of BC. The standards related information is based on the author’s experience as a member of the British Standards Institute’s technical committee that developed BS25999 parts 1 and 2, and his experience in implementing both standards through to certification within his own organisation. References to the Business Continuity Institute are made not as a parochial ‘British’ group, but in terms of its growing development into a true global professional membership organisation.

Keywords
BS25999, ISO22301, business continuity, standards, business continuity management

Andrew Mason started his career in IT at the University of London, Pickford’s Ltd and Hertfordshire County Council. During this time he gained a degree in computing and membership of the British Computer Society (MBCS), and is designated a ‘Chartered IT Practitioner’ (CITP). Andy joined the IT audit team at Sainsbury’s in 1997. In 2002 he was seconded into the Business Continuity (BC) Group, becoming permanent in 2003. Andy was responsible for the development of BC plans for the loss of systems, and a roll-out of BC into the supply chain, among other areas. Andy has also had direct experience of handling incidents ranging from the London bombings, store fires, strike action, fuel issues, protest activity and IT issues, through to serious product recalls. In April 2006, Andy joined PricewaterhouseCoopers as the Head of Business Continuity, responsible for the internal BC programme for the UK firm’s 40 offices and circa 16,000 staff. Andy has overhauled the BC programme, and in October 2009 the UK firm was certified to BS25999-2:2007. Andy is also a serving member of the British Standards Institute Committee that developed BS25999 parts 1 and 2, and was awarded ‘Business Continuity Manager of the Year’ at the CIR BC Awards in 2010.

If you wish to read the full text of the article you will need to subscribe.