GB/T 27422-2019 in English
VALIDConformity assessment -- Requirements for bodies providing audit and certification of business continuity management systems
- Issued on:2019-12-10
- Implemented on:2020-07-01
- File Format:PDF
- Delivery:Via email within 1~3 business days
$291.00
| Standard No: | GB/T 27422-2019 |
| Document status: | VALID |
| Title in English: | Conformity assessment -- Requirements for bodies providing audit and certification of business continuity management systems |
| Title in Chinese: | 合格评定 业务连续性管理体系审核和认证机构要求 |
| Language: | English |
| File Format: | Electronic (PDF) |
| Delivery: | Via email within 1~3 business days |
| Issued on: | 2019-12-10 |
| Implemented on: | 2020-07-01 |
| ICS Classification: | 35.040-Character sets and information coding |
| Chinese Classification: | L80-Data encryption |
| Professional Classification: | GB-National Standard |
| Related Keywords: | conformity assessment business continuity management systems
business continuity management systems business continuity management systems introduction gb/t business continuity management business continuity |
| Related Topics: | Examination certificate
Examination certificate Management Review Needs GBT27422 VCS validation and certification together |
《GB/T 27422-2019合格评定 业务连续性管理体系审核和认证机构要求》由TC261（全国认证认可标准化技术委员会）归口，主管部门为国家标准化管理委员会。
Introduction
GB/T 27422—2019 Standard Overview
The National Standard of the People's Republic of China GB/T 27422—2019 "Requirements for Audit and Certification Bodies for Conformity Assessment Business Continuity Management Systems" aims to standardize the audit and certification activities of business continuity management systems (BCMS) and ensure the competence, consistency and impartiality of audit and certification bodies. This standard combines the requirements of GB/T 27021.1—2017 and adds special clauses for BCMS audit and certification.
Comparison of standard frameworks
| Standard requirements | GB/T 27021.1—2017 | Supplementary contents of this standard |
|---|---|---|
| General requirements | Law and contract, impartiality management, liability and financial resources | Special terms for BCMS audit and certification, including restrictions on training activities and specifications for value-added activities |
| Resource requirements | Staff competence and outsourcing management | Detailed provisions on the knowledge, skills and competence verification methods of BCMS auditors |
| Process requirements | Pre-certification activities, planning audits, implementation audits, etc. | Added specific requirements for business impact analysis (BIA), risk assessment and incident management |
Explanation of professional terms and application cases
Business Impact Analysis (BIA)
Business impact analysis is the process of identifying and assessing the impact of potential disruptions on an organization's key business processes. For example, after a financial institution suffered a cyber attack, it used BIA to identify the financial losses and reputation damage that could result from disruptions to its core transaction systems, and thus developed a targeted recovery strategy.
Risk Assessment and Risk Management
Risk assessment is the process of identifying risks that may affect business continuity and analyzing their likelihood and impact. For example, when a manufacturing company was building a BCMS, it identified the risk of supply chain disruptions through risk assessment and developed an alternative supplier plan to reduce the risk.
Background of Standard Formulation and Technological Evolution
With the deepening of globalization and informatization, enterprises are facing more and more potential risks, such as natural disasters, cyber attacks and human errors. The formulation of GB/T 27422-2019 aims to provide enterprises with a standardized BCMS audit and certification framework to ensure that enterprises can respond quickly and resume operations when faced with emergencies.
Implementation Recommendations
- Capacity Improvement: Certification bodies should regularly provide auditors with training on business continuity management to ensure that they have the latest technical and regulatory knowledge.
- Process Optimization: During the audit process, attention should be paid to communication with customers, clarifying the scope and boundaries of BCMS, and verifying the effectiveness of the system through on-site drills and observations.
- Technical Application: Use information tools (such as BIA software) to improve risk assessment efficiency and establish a data analysis mechanism to monitor BCMS performance.
Loading PDF document...
Error loading PDF. Please make sure the file is valid and try again.
We also recommend
-
GB/T 45240-2025 in English
General requirements for device-independent quantum random number generators
2025-01-24 -
GB/T 17901.1-2020 in English
Information technology—Security techniques—Key management—Part 1: Framework
2020-03-06 -
GB/Z 24294.1-2018 in English
Information security technology—Guide of implementation for internet-basede-government information security—Part 1:General
2018-03-15 -
GB/T 15278-1994 in English
Information processing－Data encipherment－Physical layer interoperability requirements
1994-01-02 -
GB/T 15843.1-2017 in English
Information technology―Security techniques―Entity authentication―Part 1:General
2017-12-29 -
GB/T 41266-2022 in English
Security testing methods for critical network devices—Switch
2022-03-09 -
GB/T 32905-2016 in English
Information security technology SM3 cryptographic hash algorithm
2016-08-29 -
GB/T 20009-2019 in English
Information security technology—Security evaluation criteria for database management system
2019-08-30 -
GB/T 24363-2009 in English
Information security technology—Specifications of emergency response plan for information security
2009-09-30
