In this ISO capsule video today, I am going to talk about some key definitions used in ISO 22301 and ISO 22313. These two standards will help you to implement and maintain your business continuity program, and also will help you to implement maintain and certify, if you want to, your business continuity management system BCMS.
These definitions are collected during the BIA phase business impact analysis. The first one is the MTPD Maximum Tolerable Period of Disruption, the maximum time the organization accepts not to do any business before the impacts become unacceptable. The second one is MBCO Minimum Business Continuity Objective; it is the SLA we plan to deliver in a contingency situation after the disruption.
Typically, the lower the MTPD the higher the MBCO, more expensive will be to implement and maintain our recovery strategies. The third one is RTO, Recovery Time Objective; it’s our planed time, our time window we plan to restart a process or a service or delivering a product to our customers. Of course RTOs they have to fall with the MTPD previously define and approved, and finally RPO which stands for Recovery Point Objective, in other words it is the maximum tolerable data loss we can afford, most likely during a disruption we’ll lose some information electronic or non-electronic, can be anything, accounts receivable, accounts payable, sales order, costumer complains, anything. So, it is the time we have to go back in the past before the disruption where we have a point of consistence from where we can restart our processes. I hope you enjoyed and I hope seeing you soon in a future ISO Capsule video. Thank you very much.
Speaker:
Sidney R. Modenesi
Is the MBCI Manager at STROHL Brasil. He has more than 30 years’ experience in Business Continuity and a strong background in ICT. He has been the BCI Forum Leader in Brazil since 2014, and has been involved as technical expert for ISO 22301 and BS 25999 and an active MBCI by The Business Continuity Institute in 2006. |