GB/T 30146-2013 Social security—Business continuity management systems—Requirements
GB/T 30146-2013 Social security—Business continuity management systems—Requirements
Basic Information
Scope
This standard specifies the requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining, and continuously improving a documented business continuity management system (BCMS), with the aim of protecting against, reducing the likelihood of, and preparing for, responding to, and recovering from disruptions.
All the requirements specified in this standard are generic and applicable to organizations or parts of organizations of various types, sizes, and characteristics. The applicability of these requirements depends on the organization's operating environment and complexity.
The purpose of this standard is not to prescribe a uniform BCMS structure, but to enable organizations to design a BCMS that suits their own needs and meets the requirements of relevant parties. These requirements are shaped by factors such as laws, regulations, standards, products and services, workflows, the organization's size and structure, and the requirements of interested parties.
This standard is applicable to organizations of all types and sizes with the following expectations:
a) Establishing, implementing, maintaining, and improving a BCMS;
b) Ensuring compliance with a declared business continuity policy;
c) Demonstrating compliance to other organizations;
d) Seeking certification/registration from a recognized third-party certification body for their BCMS;
e) Making a self-declaration of compliance with this standard.
This standard can be used to assess an organization's ability to meet its own continuity needs and requirements.