ISO/IEC TECHNICAL SPECIFICATION TS 17021-6 First edition 2014-12-01 Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 6: Competence requirements for auditing and certification of business continuity management systems Evaluation de la conformite - Exigences pour les organismes procedant a I'audit et a la certification des systemes de management Partie 6: Exigences de competence pour I'audit et la certification des systemes de management de la continuité d'activité Reference number IS0/IEC TS 17021-6:2014(E) TEC International Organization for Standardization @ IS0 2014 rdization 5956617 Not for Re ense from IHS IS0/IECTS17021-6:2014(E) COPYRIGHTPROTECTEDDOCUMENT @ ISO 2014 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester. ISO copyright office Case postale 56 : CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail [email protected] Web www.iso.org Published in Switzerland Prganizationfor Standardization I by IHS unde etworking permitted without license from IHS IS0/IEC TS 17021-6:2014(E) Contents Page Foreword ..iv Introduction ..V 1 Scope. .1 2 Normative references .1 3 Terms and definitions 1 4 Generic competence requirements. 1 5 Competence requirements for BCMS auditors and personnel reviewing audit reports and making certification decisions. 2 5.1 General. 2 5.2 Business continuity management (BCM) terminology .2 5.3 Context of an organization. .2 5.4 Applicable laws, regulations and other requirements 2 5.5 Relationships within the business continuity management process. 2 5.6 Business impact analysis and risk assessment 2 5.7 Business continuity strategies .3 5.8 Incident management 3 5.9 Business continuity plans .3 5.10 Business continuity exercises .3 5.11 BCMS performance evaluation. 3 6 Competence requirements for personnel conducting the application review to determine audit team competence required, to select the audit team members, and to determine the audit time. .4 6.1 General 4 6.2 BCM terminology .4 6.3 Context of an organization. 4 6.4 Relationships within the business continuity management process .4 Annex A (informative) Knowledge for BCMS auditing and certification .5 Bibliography 6 iii dardization5956617 hout license from IHS