Business Continuity Management and Cybersecurity

This chapter describes international best practices for cyber risk management and business continuity. There may be several approaches that can be adopted to identify and assess key cyber risk scenarios but the focus for business continuity management (BCM) should be on the potential impact from single points of failure over a period of time, and the potential costs and expenses to rectify the problem. A key aspect should be to determine the impact to the organization, business, key stakeholders, organization partners, and customers. The ISO 27001 and ISO 22301, international standards for information security and business continuity management systems, respectively, are international best practices and standards that may be used by organizations to implement policies and a framework to address cyber incidents.