Adviza and its industry peers have worked closely with the British Standards Institute (BSi) and leading industry bodies to develop practical standards and guidance within the risk management industry.
Business Continuity
Adviza was heavily involved in developing the initial BSi guidance on Business Continuity (PAS 56) back in 2003 and for bringing it to market. As demand for a more widely recognised and accepted Standard became evident, Adviza remained heavily involved with BSi as a member and active participant in the BSI development committees for the development of the formal British Standards to replace PAS 56, in the form of the following highly successful BSi Standards:
- Business Continuity Management – Part 1: Code of Practice (BS25999-1:2006)
- Business Continuity Management – Part 2: Specification (BS25999-2:2007)
- Information and Communication Technology Continuity Management: Code of Practice (BS 25777:2008)
As one of BSI’s fastest selling Standards, BS 25999 has developed to form the basis for many other international standards and is frequently referenced as an industry benchmark for best practice.
Risk Management
In addition to work on Business Continuity Standards, Adviza has also used its wealth of experience to work closely with the BSi in its development committee for the development and publication of the UK’s first formal Standard on Risk Management – BS 31100:2008 Risk Management: Code of Practice.
As well as work with the BSi, Adviza has worked closely with the Office of Government Commerce to review and update their publication and guidance on Management of Risk (M_o_R). This publication and the associated pocket book (which Adviza also helped write) was designed to complement the OGC's guidance on programme, project and service management (MSP, PRINCE2 and ITIL) but covers the risk management elements in greater detail. This was originally established in response to the Turnbull report's recommendations that organisations should implement risk management frameworks and internal control statements to embed risk management in their management processes.
