8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 1/10

PwC

BS25999 implementation in amulti-site enterprise

BCI/BSI/CCS BS25999 User GroupLeeds, April 28th 2010

Andy Mason MBCS CITP MBCI Head of Business ContinuityPricewaterhouseCoopers LLP

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 2/10

PricewaterhouseCoopers LLP

Contents

BS25999 across PwCIs it right for you?Where next?Is everything in order?

What was the multi-site approach?Challenges – what challenges?Conclusion – the end of the beginning?

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 3/10

PricewaterhouseCoopers LLPOctober 2009

Slide 3BCI World Conference

BS25999 implementation in a multi-site enterprise

BS25999 across PwC

PricewaterhouseCoopers providesindustry-focused assurance, tax andadvisory services to build public trustand enhance value for our clients and

their stakeholders. More than163,000 people in 151 countriesacross our network share theirthinking, experience and solutions todevelop fresh perspectives andpractical advice

PricewaterhouseCoopers in the UKhas 16000 Partners and staff spreadacross 41 offices from Plymouth toAberdeen

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 4/10

PricewaterhouseCoopers LLPOctober 2009

Slide 4BCI World Conference

Is it right for you?

Know the answer

Gap analysis

Cost/Benefit analysis

Operational impactPrevious experience of managementsystems

Gain approval

Supplier selection

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 5/10

PricewaterhouseCoopers LLPOctober 2009

Slide 5BCI World Conference

Where next?

ISO 14001 Environment Management System

PAS 99 Specification of common management systemrequirements as a framework for integration

Standardised format for documentation

Programme to Management System

Requirements of BS25999-2:2007

Plan the project

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 6/10

PricewaterhouseCoopers LLPOctober 2009

Slide 6BCI World Conference

Is everything in order?

BS25999 Internal Audit training

Pre-assessment

Stage 1

Stage 2

Position for graphicor image

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 7/10PricewaterhouseCoopers LLP

October 2009Slide 7

BCI World Conference

What was the multi-site approach?

Simple, concise, consistent and relevant

Small central team

Firm first, standard second

Targeted and centrally drivenRepeatable components

Sustainable

400+ people

800+ hardcopy plans

Position for graphicor image

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 8/10PricewaterhouseCoopers LLP

October 2009Slide 8

BCI World Conference

Challenges – what challenges?

Administration for administration’s sake

Competencies – us and them!

MTPoDs

Integrated management systems – not quite!Awareness-raising

Static versus dynamic

How and why?

Position for graphicor image

Position for graphicor image

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 9/10PricewaterhouseCoopers LLP

October 2009Slide 9

BCI World Conference

Conclusion –

the end of the beginning?

Positive experience

Disciplined and structured

Makes you think:

• What you do• How you do it

• And why you do it

Continual improvement

Ongoing assessment

What does success look like?

BS25999 implementation in a multi-site enterprise

8/3/2019 Andy Mason

http://slidepdf.com/reader/full/andy-mason 10/10

This publication has been prepared for general guidance on matters of interest only, and does not constituteprofessional advice. You should not act upon the information contained in this publication without obtaining specificprofessional advice. No representation or warranty (express or implied) is given as to the accuracy or completenessof the information contained in this publication, and, to the extent permitted by law, PricewaterhouseCoopers LLP,its members, employees and agents do not accept or assume any liability, responsibility or duty of care for anyconsequences of you or anyone else acting, or refraining to act, in reliance on the information contained in thispublication or for any decision based on it.

 © 2009 PricewaterhouseCoopers LLP. All rights reserved. 'PricewaterhouseCoopers' refers to

PricewaterhouseCoopers LLP (a limited liability partnership in the United Kingdom) or, as the context requires, thePricewaterhouseCoopers global network or other member firms of the network, each of which is a separate andindependent legal entity. PwC

“There are risks and costs to a  programme of action…but they are far 

less than the long ranging costs of comfortable inaction.”John F Kennedy