Our Information Security Management team are tasked with developing our current plans into a managed process for developing and maintaining business continuity throughout the company - as part of our ISO27001 initiatives for the 2009-2010 programme.
To do this we have set a framework to:
- identify assets involved in business critical processes
- identify risks and vulnerabilities faced by the company
- assess the likelihood and potential impact they may have
- understand the range of impacts that interruptions caused by; for example, power failures, virus attacks, fires, floods may have on the ability of the business to meet its commitments
- ensure that adequate financial, organisational, technical and environmental resources are available
- ensure always the safety and health of staff and the protection of our information systems and organisational assets
- check that sufficient insurance is in place to cover the risks
- formulate and agree with line managers and stakeholders a business continuity strategy consistent with our overall business strategy and objectives
- ensure that plans are tested and improved as part of our continuous improvement culture
- make the plans part of the company's culture - with defined roles and responsibilities for their implementation by the ISM team by adoption of a systematic approach for continuous re-evaluation
This process has been agreed by the Board - to follow-on from the Lean Manufacturing programme that is currently under way.
In the meantime, we have arrangements in hand to formalise our business continuity and disaster recovery plans with our local partner company. This company mirrors all our machinery, MIS, Pre-press, printing and finishing processes. This is supported by remote back-up of all critical data to an external server on a daily basis.
CSR
Subscribe to our quarterly newsletter to keep in touch with what we are up to.
