BCMS Case Study (ISO 22301 - Business Continuity Management System)
1 |P a g e“ZAMPAX” Case study This section contains a sample Business Continuity Management System (BCMS) documentation of a fictitious company called “Zampax”. While the company is not real, the documentation forming this section has been developed on the basis of real BCMS documentation implemented in other organizations. Use this material for the completion of exercises involving the consultation of a Case Study, assuming that Zampax has developed this BCM Manual and has sought registration to ISO 22301 Bear in mind that the documents forming this Manual are not to be taken as an example for the development of a BCM Manual in compliance with ISO 22301as they contain errors and omissions and are for training purposes only. Zampax fictitious profile Zampax is a UK independent manufacturer and distributor of DVDs and CDs. Clients include major movie studios and software houses. Zampax is based in London and currently has the capacity to produce approximately 0.6 million discs per day, which is approximately 30% of European DVD / CD replication capacity. Zampax has two other sites in Glasgow and Manchester. For exercise purposes it shall be assumed that this Manual applies to Zampax Headquarters& Production Site in London only.
Mastering BCMS–Student material ZAMPAX–Case study 2 |P a g eZAMPAX Business Continuity Management Manual Notice of confidentiality This document and the information contained in it are confidential and are the property of Zampax. They may not in any way be disclosed, copied or used by anyone except as expressly authorized by Zampax.
Mastering BCMS–Student material ZAMPAX–Case study 3 |P a g eM1. 1 . BCM POLICY- GENERAL M1.1.1. PURPOSE This document sets forth Zampax corporate policies and standards for business continuation management. The Manual provides both the guidelines for the development and overall maintenance and testing of the corporate BCM System, as well as the incident management structure and plans for the implementation of effective resumption of critical business operations within stated recovery time objectives as defined by the individual business units. Adherence to this policy and procedures ensures that business continuity management is consistent across the company and that plans and procedures are compliant with ISO 22301 and with corporate and local legal and regulatory requirements. M1.1.2. SCOPE This policy applies to all business operations, departments and divisions of Zampax. However, any conflict between this policy and either current Human Resource policies or applicable 1aws shall be resolved in favor of Human Resource policy and compliance with all laws. M1.1.3. OBJECTIVES The objective of this policy is to define a structure for: (i)The identification of all critical services and activities undertaken by Zampax; (ii)The development of plans to ensure continuity of key services following a disruption, which may be caused by loss/unavailability of facilities, personnel, IT
Want to read all 20 pages?
Previewing 5 of 20 pages Upload your study docs or become a member.
Want to read all 20 pages?
Previewing 5 of 20 pages Upload your study docs or become a member.
End of preview
Want to read all 20 pages? Upload your study docs or become a member.