22301 Annual Maintenance
Once ISO Standard is implemented, the organization will be required to undergo periodic maintenance and Audits to ensure that the system is being maintained on real time basis to ensure the upkeep of effective compliances.
What Happens If BCMS Maintenance Stops?
- ❌ No BCP Test Reports
- ❌ No BCMS Compliance
- ❌ No BCMS Trainings
- ❌ No Risk Assessment
- ❌ No Real Time Vulnerability Mgmt
- ❌ No Regular Penetration Tests
- ❌ No Fire Safety Drills
- ❌ No Incident Management
Impact on Resilience & Audits
- ⚠️ Total Breakdown of BCMS System & Loss of Resilience
- ⚠️ Customer Disruption during Disasters & Brand Damage
- ⚠️ Major Audit Non-Conformities in Surveillance Audits
ISO 22301 Maintenance Deliverables
Keeping the site ready for Security Audits based on ISO 22301 Standards at real time basis
Conducting Internal security audits, including surprise audits and scheduled audits.
Conducting Periodic BCMS & Management Review Meetings as per the periodicity
Monthly BCMS Dashboard Compilation as per ISO 22301 Standard requirements
Monitoring of 22301 compliance and Legal Requirements for all the processes.
Monitoring Risk Management Process to mitigate the risks with appropriate treatment of risk
Monitoring BCMS Objectives of the organization and Highlighting the issues which effect the achievement of objectives.
Conducting VA-PT for 5 IPs every Quarter & 1 Web Application (20 pages) annually.
Monitoring the vulnerability reporting and patching mechanism and suggesting the appropriate mitigation action.
Training the Trainers every Six months or on any new changes in the policies and providing certification to 1000 employees.
Monitoring Information security Incident Management Process to monitor and verifying efficacy of root cause analysis of the security Incidents.
Keeping all required controls, reports and matrices of all the related departments ready as per 22301 standard.
Monitoring the BCP Tests & Fire Drills conducted as per the periodicity by the client's respective teams.
Suggesting the improvements to security posture of the organization to the Management on regular basis.
Closing the audit observations along with corrective and preventive actions.
Interacting with CB's & Clients for all upcoming audits and closing the audit findings
Helping in filling up RFPs of various clients and attending client meetings / conferences.
ISO 22301 Annual Maintenance Schedule
| Periodicity | Resource & Delivery Plan |
|---|---|
| Daily Compliance Adherence | Offsite daily Monitoring by Jinnicore Team for daily compliances via mail alerts |
| Weekly Compliance Check | Offsite Monitoring & Review by one Sr. Resource for all Departmental Compliances |
| Monthly Compliance Dashboard | Onsite Presence of Jinnicore Security Manager once a month. |
| Quarterly VAPT / WAPT | Onsite presence of Senior Resource to conduct VAPT |
| Half Yearly Audits | Onsite Presence of Senior Resource for Half Yearly Audits |
| Yearly BCP Drills | Yearly BCP Tests |
Benefits of Outsourcing ISO 22301 Maintenance
Real-Time BCMS Compliance thereby creating Audit Ready Environment.
Saves cost on costly BCMS Resources.
Saves productive time of your operations teams & costly resources which participate in BCMS Adherence & audit preparation hence "Increasing Productivity".
100% availability of BCMS team due to backup team availability.
High Customer Confidence thereby increases business stability and possibilities of winning new opportunities.
Your client's infosec queries are answered before time
Maintain Business Resilience with ISO 22301
Outsource your ISO 22301 Business Continuity maintenance to Jinnicore to conduct BCP drills, pass audits, and maintain operational resilience.