Resources

What the baseline asks

Determine and provide the resources needed to establish, implement, maintain and continually improve the BCMS.

What it means when the service runs in the cloud

Fallback capability costs money, and the budget is usually the first thing cut when nothing has failed for a year. Resource the tests, the second region, the export tooling and the people who know how to use them.

Evidence an auditor or a customer asks for

• Documented determination of the resources the BCMS requires
• Evidence of provision, such as budget allocation, headcount or contracted capacity
• Evidence resourcing is revisited as the BCMS matures

Common gaps in a cloud estate

• Resource need never determined, so provision is whatever was left over
• Provision covers implementation only and lapses at maintenance
• Resource shortfalls known to the BCMS owner but never escalated to top management

Done well, what the file shows

Done well, this clause leaves a documented determination of the resources the bcms requires that names the service, the region and the date it was last tested, so a reviewer can follow it to the provider document without asking anyone. Where that record does not exist, the gap is visible in the next review whether or not the service is working.

A test you can run this month

Confirm the budget for fallback and testing is named and protected.