Contingency Planning

ASIS To Develop Business Continuity, Security Risk Assessment Guidelines

August 12, 2008

ASIS International recently announced its intent to initiate development of two American National Standards. The business continuity management standard will be based on the ASIS Business Continuity Guideline, and the risk assessment standard will be based on the ASIS General Security Risk Assessment Guideline.

The Business Continuity Management American National Standard, based on the ASIS guideline, will include auditable criteria for preparedness, crisis management, business and operational continuity and disaster management.

The General Security Risk Assessment American National Standard, based on the ASIS guideline, will provide a needed basis for the process involved in the objective analysis of the efficacy of risk management controls that protect an organization’s assets. It will address operational risks and not financial risks.

Both American National Standards will utilize a management systems process approach using the Plan-Do-Check-Act model. Organizations of all types, including those in the global business community, not-for-profit entities, educational institutions, government agencies and more will likely be directly impacted by the standards.

Standards are voluntary criteria, guidelines and best practices used to enhance the quality, performance, reliability and consistency of products, services and/or processes.

“In the United States and globally, standards are becoming a major influence on the security scene,” said Mark Geraci, chairman of the ASIS Commission on Standards and Guidelines.