GB/T 27021.6-2020 English PDFUS$174.00 · In stock
Delivery: <= 3 days. True-PDF full-copy in English will be manually translated and delivered via email. GB/T 27021.6-2020: Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 6: Competence requirements for auditing and certification of business continuity management systems Status: Valid
Basic dataStandard ID: GB/T 27021.6-2020 (GB/T27021.6-2020)Description (Translated English): Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 6: Competence requirements for auditing and certification of business continuity management systems Sector / Industry: National Standard (Recommended) Classification of Chinese Standard: A00 Classification of International Standard: 03.120.20 Word Count Estimation: 9,992 Date of Issue: 2020-03-31 Date of Implementation: 2020-10-01 Issuing agency(ies): State Administration for Market Regulation, China National Standardization Administration GB/T 27021.6-2020: Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 6: Competence requirements for auditing and certification of business continuity management systems---This is a DRAFT version for illustration, not a final translation. Full copy of true-PDF in English version (including equations, symbols, images, flow-chart, tables, and figures etc.) will be manually/carefully translated upon your order. Conformity assessment - Requirements for bodies providing audit and certification of management systems - Part 6.Competence requirements for auditing and certification of business continuity management systems ICS 03.120.20 A00 National Standards of People's Republic of China Requirements for conformity assessment management system audit certification bodies Part 6.Business Continuity Management System Audit certification capability requirements 2020-03-31 released 2020-10-01 implementation State Administration for Market Regulation Issued by the National Standardization Management Committee Table of contentsPreface Ⅲ Introduction Ⅳ 1 Scope 1 2 Normative references 1 3 Terms and definitions 1 4 General competency requirements 1 5 Competence requirements for BCMS auditors, review audit report personnel and personnel making certification decisions1 5.1 General 1 5.2 Business Continuity Management (BCM) Terminology 2 5.3 Organizational environment 2 5.4 Applicable laws, regulations and other requirements 2 5.5 Relationship in the process of business continuity management 2 5.6 Business impact analysis and risk assessment 2 5.7 Business Continuity Strategy 2 5.8 Incident Management 3 5.9 Business Continuity Plan 3 5.10 Business Continuity Exercise 3 5.11 BCMS performance evaluation 3 6 Implement the competence requirements of application reviewers to determine the competence requirements of the audit team, select the members of the audit team and determine the audit time 3 6.1 General 3 6.2 BCM terminology 3 6.3 Organizational environment 3 6.4 Relationships in the business continuity management process 3 Appendix A (informative appendix) Business continuity management system audit and certification knowledge 4 Reference 5 Requirements for conformity assessment management system audit certification bodies Part 6.Business Continuity Management System Audit certification capability requirements1 ScopeThis part of GB/T 27021 supplements the existing requirements of ISO /IEC 17021.2011.This section contains The specific competence requirements of the personnel involved in the continuous management system (BCMS) certification process.2 Normative referencesThe following documents are indispensable for the application of this document. For dated reference documents, only the dated version applies to this article Pieces. For undated references, the latest version (including all amendments) applies to this document. ISO /IEC 17000 Conformity Assessment Vocabulary and General Principles ISO /IEC 17021.2011 Conformity Assessment Management System Certification Body Requirements ISO 22300 Public Safety Terminology ISO 22301 Public Security Business Continuity Management System Requirements3 Terms and definitionsThe terms and definitions defined by ISO 22300, ISO 22301, ISO /IEC 17000 and ISO /IEC 17021.2011 apply to this document.4 General competence requirementsThe certification body shall define competency requirements for each certification function in ISO /IEC 17021.2011 Table A.1.Defining these capabilities When required, the certification body shall consider all the requirements specified in ISO /IEC 17021.2011, as well as those specified in Chapters 5 to 6 All requirements. Note 1.Appendix A provides an informative summary of the competence requirements of personnel involved in a specific certification function. Note 2.ISO 19011 provides information on audit principles. 5 Competence requirements for BCMS auditors, review audit report personnel and personnel making certification decisions 5.1 General All BCMS auditors, personnel reviewing audit reports and personnel making certification decisions should have a certain level of competence, including ISO / The general capabilities described in IEC 17021.2011, and the BCMS knowledge described in 5.2~5.11 of this section. Note 1.Each auditor in the audit team does not have to have the same ability, but the overall ability of the audit team needs to be sufficient to achieve the audit objectives. Note 2.Although the basic elements of these knowledge requirements are the same, it can be recognized that for the auditor, the person who reviews the audit report and the person who makes the certification decision, The level of detail required for knowledge may vary. This is determined by each certification body. 5.2 Business Continuity Management (BCM) Terminology The audit team, the person who reviews the audit report and the person who makes the certification decision shall have knowledge of BCM and risk terms, definitions and concepts. 5.3 Organizational environment The audit team, the personnel reviewing the audit report and the personnel making certification decisions shall have knowledge of the environment in which the organization operates. 5.4 Applicable laws and regulations and other requirements The audit team, the person who reviews the audit report and the person who makes the certification decision should have relevant knowledge to determine whether the organization has identified and evaluated the appropriate Compliance with laws and other requirements. Note 1.Administrative rules and regulatory requirements can be expressed as legal requirements. Note 2.Other requirements can include voluntary national, international and industry-specific agreements. 5.5 Relationship in the business continuity management process The audit team, the person who reviews the audit report, and the person who makes the certification decision should have knowledge of the relationship between the various elements of BCM. 5.6 Business impact analysis and risk assessment The audit team, the person who reviews the audit report and the person who makes the certification decision should have the knowledge of business impact analysis (BIA), including. ---Methodology and technology; ---Identification of product and service delivery activities; ---Evaluate the impact of time lapse and identify when it will become unacceptable; ---Set priority for restart; ---Identification of dependent and supporting resources. The audit team, the personnel who review the audit report and make certification decisions should have knowledge of risk assessment and risk management, including. ---Methodology and technology; ---Identification, analysis and evaluation of risks related to interruption events; ---The effectiveness of existing control measures; ---Identification of appropriate risk treatment. 5.7 Business Continuity Strategy The audit team, the personnel reviewing the audit report and the personnel making certification decisions shall have strategies and methods to reduce the impact and possibility of interruption Academic knowledge, including. ---that is sure; ---Preparatory measures; ---The choice of alternative strategies; ---Cost-benefit analysis of continuity strategy; ---Coordination method with external parties; --- Incident response; ---communication; ---Command and control; ---Response to the coordination of the organization; ---Restoration and reconstruction. 5.8 Incident Management The audit team, the person who reviews the audit report and the person who makes the certification decision should have knowledge of incident management measures to determine whether the organization recognizes Appropriate response to interruption events, including early warning and communication needs. The audit team, the person who reviews the audit report and the person who makes the certification decision shall have relevant knowledge to evaluate the organization and test its event management ability Effectiveness. 5.9 Business Continuity Plan The audit team, the personnel reviewing the audit report, and the personnel making certification decisions should have knowledge of business continuity plans, including business continuity plans. The establishment, development, maintenance, purpose, format, structure and procedure details of the plan. 5.10 Business continuity exercise The audit team, the personnel reviewing the audit report and the personnel making certification decisions shall have the knowledge to plan and execute business continuity drills, including The type, process, skills and criteria for evaluating the organization’s ability to meet its recovery priorities and objectives. 5.11 BCMS performance evaluation The audit team, the person who reviews the audit report and the person who makes the certification decision should have the knowledge of BCMS performance evaluation, including indicators and performance Knowledge measured to determine whether the organization’s BCMS performance achieves the goals and objectives determined by its management. 6 Implement the competence requirements of application reviewers to determine the competence requirements of the audit team, select the members of the audit team and determine the audit time 6.1 General The competencies that should be possessed by groups or individuals for other certification functions include the general competencies described in ISO /IEC 17021.2011, and the BCMS knowledge described in sections 6.2 and 6.3. 6.2 BCM terminology The groups or individuals involved in other certification functions should have knowledge of BCM terminology. 6.3 Organizational environment The groups or individuals involved in other certification functions should have knowledge of the environment in which the organization operates. 6.4 Relationships in the business continuity management process The groups or individuals involved in other certification functions should have knowledge of the interrelationships between BCM elements. ......Tips & Frequently Asked Questions:Question 1: How long will the true-PDF of GB/T 27021.6-2020_English be delivered?Answer: Upon your order, we will start to translate GB/T 27021.6-2020_English as soon as possible, and keep you informed of the progress. The lead time is typically 1 ~ 3 working days. The lengthier the document the longer the lead time.Question 2: Can I share the purchased PDF of GB/T 27021.6-2020_English with my colleagues?Answer: Yes. The purchased PDF of GB/T 27021.6-2020_English will be deemed to be sold to your employer/organization who actually pays for it, including your colleagues and your employer's intranet.Question 3: Does the price include tax/VAT?Answer: Yes. Our tax invoice, downloaded/delivered in 9 seconds, includes all tax/VAT and complies with 100+ countries' tax regulations (tax exempted in 100+ countries) -- See Avoidance of Double Taxation Agreements (DTAs): List of DTAs signed between Singapore and 100+ countriesQuestion 4: Do you accept my currency other than USD?Answer: Yes. If you need your currency to be printed on the invoice, please write an email to Sales@ChineseStandard.net. In 2 working-hours, we will create a special link for you to pay in any currencies. Otherwise, follow the normal steps: Add to Cart -- Checkout -- Select your currency to pay. |
