The BCMS should also include a mechanism, or process, for assurance–keeping everything current, relevant and tested, and capable of communicating this level of preparedness to all stakeholders and particularly the Board, who have a legal responsibility to know what is being done about the management of these types of operational risk. So the real value of business continuity arrangements is delivered if:
1 the response plans, mechanisms and contingency resources are up to date, meet specification and have been tested;
2 all stakeholders, especially customers, know how well prepared and resilient the organisation is; and
3 the Board, or governing body, know that 1 and 2 are met.
Many organisations get this ...