ISO 22301:2019 – Business Continuity Management Policy
- Policy Statement
Neurosoft S.A. is committed to establishing effective business continuity plans to protect its key business activities and meet its obligations to its stakeholders.
As part of this commitment the organisation has established a Business Continuity Management System (BCMS) which complies with the requirements of the ISO/IEC 22301:2019 international standard for business continuity.
In line with the standard, it is essential that our business continuity objectives are consistent with our policies, measurable where practicable, communicated effectively within the organization (and outside where appropriate) and updated as part of the BCMS management review process.
Objectives will be based on a clear understanding of our business continuity requirements, including those from interested parties, and will consider the results of business impact and risk assessments carried out at various levels within the organization.
- Scope
This policy applies to all certified business services and key internal activities provided by Neurosoft, irrespective of the delivery method or technology used. It encompasses all aspects of business continuity management, including planning, design and testing of our plans. All employees, contractors, and third-party service providers are expected to adhere to this policy and support the objectives of the Business Continuity Management System.
- Objectives
- Prepare Neurosoft in the event of extended service outages caused by factors beyond control.
- Restore services to the widest extent possible in a minimum time frame.
- Implement preventive measures whenever possible to minimize network failure and to recover as rapidly as possible when a failure occurs.
- Provide procedures and resources needed to assist in recovery.
- Identify vendors and customers that must be notified in the event of a disaster.
- Assist in avoiding confusion experienced during a crisis by documenting, testing, and reviewing recovery procedures.
- Identify alternate sources for supplies, resources, and locations.
- Document store and safeguard vital records.
- Responsibilities
Top management is responsible for providing the necessary resources, support, and leadership to ensure the effective implementation and maintenance of the Business Continuity Management System.
Managers and team leaders are responsible for implementing and maintaining processes and procedures, monitoring the performance of the management system, and driving continuous improvement.
All employees and suppliers, involved in the services delivery, are responsible for adhering to the established processes, contributing to the improvement of business continuity, and reporting any issues or opportunities for improvement to their respective supervisors.
- Compliance
All businees continutiy management activities shall adhere to the requirements outlined in ISO/IEC 22301:2019. Regular audits and reviews will be conducted to ensure ongoing compliance and to identify opportunities for enhancing the effectiveness and efficiency of the BCMS.
- Improvement
Continuous improvement is integral to our business continuity management approach. We are committed to regularly reviewing our processes, identifying areas for improvement, and implementing corrective and preventive actions to enhance the resilience of our business activities and our customers satisfaction.
- Communication
Effective communication is crucial to the success of our BCMS. We are committed to ensuring that all stakeholders are informed about relevant activities, changes, and improvements. Open lines of communication will be maintained to encourage feedback, suggestions, and concerns related to business continuity.
- Training and Competence
All employees involved in business continuity shall receive appropriate training to perform their roles effectively. We are committed to promoting a culture of continuous learning and development to ensure that our staff possesses the necessary skills and competencies to deliver high-quality services that meet customer requirements and industry standards.
- Documentation
All relevant processes, procedures, and policies shall be documented, regularly reviewed, and updated as necessary to ensure their accuracy and relevance. Document control procedures will be implemented to manage the creation, approval, distribution, and revision of all documentation.
- Review and Revision
This Business Continuity Management Policy will be reviewed on a regular basis to ensure its continued suitability, adequacy, and effectiveness in meeting the organization’s objectives and compliance requirements. Revisions will be made as necessary to reflect changes in the organization’s structure, objectives, or external context.
- Conclusion
Neurosoft provides services that consistently meet customer requirements, regulatory standards, and industry best practices. Through the effective implementation of our Business Continuity Management System, we aim to continuously improve our processes, enhance customer satisfaction, and achieve excellence in business continuity management.