Achieving Standards

The problem with standards is that organisations that can easily achieve them don't need them, and those that really need them, can't achieve them.

An over-simplification perhaps. However, there is a significant gap between the number of organisations working towards certification and the number actually certified.

Another problem with standards is the gap between certification and capability. It is quite possible to achieve capability without obtaining certification and, more worryingly, it is possible to obtain certification but not capability. A recent Chartered Management Institute survey identified that only 49% of organisations in the UK have a business continuity plan covering critical activities. It is therefore clear that most organisations have neither the method nor capability to recover from a serious business interruption.

There are a number of existing standards (for instance in the United States and Australia) and the 2007 release of British Standard BS 25999-2 is an important development in this country. The publication in November 2007 of ISO/PAS 22399 appears to be an important step in the development of a truly international standard whilst the development of BS 25777 is intended to complement other standards with specific guidance on IT continuity. In addition, firms providing disaster recovery capability to their customers will seek to comply with ISO 24762, the international guidelines for information and communications technology disaster recovery services.

However, even with these standards, there will remain a number of challenges:

1. A constantly changing environment versus a static standard.
   
   
2. The appropriateness of applying a single standard to the full range of organisations.
   
   
3. The applicability of a national standard to multi-national organisations.

Whatever the drivers are for your organisation, Jermyn Consulting can assist and advise on the achievement of an appropriate standard.  Most importantly, Jermyn Consulting has the experience to enable you to build a truly resilient organisation.