1 PURPOSE

  1. To monitor the performance of BCM Institute’s Business Continuity Management System (BCMS) and to evaluate the effectiveness and efficiency of the BC procedures, as determined by the Management Review.

2 SCOPE

2.1 This procedure applies to the Management Review meeting conducted by the Executive Management.
2.2 BCM Institute shall determine:
what needs to be monitored and measured,
the methods for monitoring, measurement, analysis and evaluation, as applicable, to ensure valid results
when the monitoring measuring shall be performed, and
when the results from monitoring and measurement shall be analysed and evaluated.
2.3 BCM Institute shall determine:
Retain appropriate documented information as evidence of the results.
Evaluate the BCMS performance and the effectiveness of the BCMS.
Take action when necessary to address adverse trends or results before a nonconformity occurs.
Retain relevant documented information as evidence of the results.

3 RESPONSIBILITY

3.1 The Organization BCM Coordinator is responsible to initiate the meeting and ensure that the necessary information is collected to allow the Executive Management to carry out the review effectively.
3.2 Business Unit BCM Coordinators and/or User
Monitor and record the performance.
Implement actions to evaluate BC procedures.
3.3 Head of Business Units and/or Process Owner
Review and analyse the performance.
Record the results of the BC procedures evaluation.
3.4 The Organization BCM Coordinator has the overall responsibility and authority to monitor performance and evaluate BC procedures.

4.1 PROCEDURE FOR MONITORING PERFORMANCE

The procedures for monitoring performance shall:

  1. Set performance metrics appropriate to the needs of the organisation.
  2. Monitor the extent to which the organisation’s business continuity policy, objectives and targets are met.
  3. Perform the processes, procedures and functions that protect its prioritised activities.
  4. Monitor compliance with this International Standard and the business continuity objectives.
  5. Monitor historical evidence of deficient BCMS’ performance.
  6. Record data and results of monitoring and measurement to facilitate subsequent corrective actions.
    • Note: Deficient performance could include non-conformity, near misses, false alarms, and actual incidents.

4.2 PROCEDURE FOR EVALUATING BC PROCEDURES

BCM Institute shall:

  1. Conduct evaluations of its BC procedures and capabilities in order to ensure their continuing suitability, adequacy and effectiveness.
  2. Undertake evaluations through periodic reviews, exercising, testing, post-incident reporting and performance evaluations.
  3. Evaluate compliance with applicable legal and regulatory requirements periodically, industry best practices, and conformance with its own business continuity policy and objectives.
  4. Conduct evaluations at planned intervals and when significant changes occur.
  5. Undertake a post-incident review and record the results, when a disruptive incident occurs and results in the activation of its BC procedures.

5 DEFINITIONS

  1. Business Continuity Management System (BCMS)
  2. BCM Steering Committee
  3. Management Review
  4. Performance

6 RELATED DOCUMENT

  1. Performance Evaluation (ISO22301:2012 #9).

7. RECORDS

  1. 7.1 2012 Performance Monitoring and Measurement
  2. 7.2 2013 Performance Monitoring and Measurement
  3. 7.3 2014 Performance Monitoring and Measurement

8 APPENDICES

  1. Nil