Business Continuity Plan Exercise for Outsourced Services

#1
Hello everyone. Just want to check if a company can require their outsourced service providers i.e. contractors and suppliers to test their BCP and submit a report to us. Is this part of ISO 22301 standard requirement or any other ISO standard or just a good practice to implement?

Thank you.
 
Elsmar Forum Sponsor
#2
This is not necessarily an ISO requirement but could be part of their contractual obligations to you. Your certification body make audit how YOU are managing your suppliers and part of that will be the checking/DD of their management system.
 
#3
This is not necessarily an ISO requirement but could be part of their contractual obligations to you. Your certification body make audit how YOU are managing your suppliers and part of that will be the checking/DD of their management system.
Thanks @DanBan. Our CB has threatened to issue us an NC for not testing our supplier's BCP. I was surprised since this was the first time this was raised. We have tested our own BCP but I am trying to find out which clause in the standard requires testing of our supplier's BCP.
 
#4
To be clear - YOU do not need to test suppliers BC plans, they (the CB) will be checking how you are checking on your supplier (think of yourself as acting like a CB). If however there is nothing in the contract between you and the supplier - you may find it difficult to get them to do things like BC exercise and testing. You can obviously support and guide them.

Contract renewal will be the obvious carrot to dangle! :)
 
Thread starter Similar threads Forum Replies Date
E BCP (Business Continuity Plan) Call Tree Business Continuity & Resiliency Planning (BCRP) 13
L Need a bone to throw at a customer (Business Continuity/Contingency Plan) Business Continuity & Resiliency Planning (BCRP) 11
R How to test a BCP (Business Continuity Plan) Business Continuity & Resiliency Planning (BCRP) 6
K Testing the Business Continuity Plan Business Continuity & Resiliency Planning (BCRP) 5
Richard Regalado Sample Plan for Developing an ISO 22301 Business Continuity Management System (BCMS) Business Continuity & Resiliency Planning (BCRP) 3
T Incorporate BCP (Business Continuity Plan) into QMS Business Continuity & Resiliency Planning (BCRP) 1
I Business Continuity Plan for manufacturing a IVD ISO 13485:2016 - Medical Device Quality Management Systems 4
P Can anyone give Business Continuity Plan (BCP) (ISO 27001) Business Continuity & Resiliency Planning (BCRP) 10
RoxaneB Vendor Listing in a Business Continuity Plan / Disaster Recover Business Continuity & Resiliency Planning (BCRP) 6
qualprod Business Continuity Planning in ISO 9001? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 10
Richard Regalado Top 10 operational risks of 2019 for business continuity planning Business Continuity & Resiliency Planning (BCRP) 6
M SOP Sample for BC/ISO22301 (Business Continuity) wanted Business Continuity & Resiliency Planning (BCRP) 4
M BCM (Business Continuity) and BPM in a company with an IT System Business Continuity & Resiliency Planning (BCRP) 0
J Business Continuity - ISO 22301 BCMS Strategic and Tactical Objectives Business Continuity & Resiliency Planning (BCRP) 3
S Question about IS in Business Continuity Management (A.17.1) IEC 27001 - Information Security Management Systems (ISMS) 2
D Exercising Business Continuity or Disaster Recovery Plans Business Continuity & Resiliency Planning (BCRP) 5
J ISO 22301 - Implementing a Business Continuity Management System Business Continuity & Resiliency Planning (BCRP) 15
K Disaster Recovery and Business Continuity Planning - Where to start? Business Continuity & Resiliency Planning (BCRP) 20
Richard Regalado Weathering the storm - The 2013 Business Continuity Management Survey Business Continuity & Resiliency Planning (BCRP) 2
J ISO 27001 - Business Continuity Event Simulation Testing Business Continuity & Resiliency Planning (BCRP) 8
S Business Continuity Disaster Recovery Gantt Chart Business Continuity & Resiliency Planning (BCRP) 5
A Risk Assessment, Business Continuity Planning, Testing, BCP, etc as part of ISO 27001 IEC 27001 - Information Security Management Systems (ISMS) 8
J Business Continuity Planning - Experiences related to Thailand's flooding Business Continuity & Resiliency Planning (BCRP) 5
A Business Continuity ? Disaster Recovery and Crisis Management differences Business Continuity & Resiliency Planning (BCRP) 8
Richard Regalado What's brewing at ISO for Business Continuity? BS 25999's ISO Counterpart Business Continuity & Resiliency Planning (BCRP) 10
Marc Business Continuity & Resiliency Planning (BCRP) - New Forum Business Continuity & Resiliency Planning (BCRP) 16
J Business Continuity Management Documentation Business Continuity & Resiliency Planning (BCRP) 2
D BS 25999 - BCM (Business Continuity Management) Strategy Business Continuity & Resiliency Planning (BCRP) 2
Randy Some hints on BS25999-2:2007 - "Business Continuity (BC)" Business Continuity & Resiliency Planning (BCRP) 5
Sidney Vianna ANAB - Certified Organizations Business Continuity and Disaster Recovery Business Continuity & Resiliency Planning (BCRP) 0
Sidney Vianna BS25999-1:2006 First Part of Business Continuity Standard Published Business Continuity & Resiliency Planning (BCRP) 48
J Business Continuity for IVD manufacturers - Our most severe risk is fire Business Continuity & Resiliency Planning (BCRP) 4
L Did anyone hear business registration ontario? General Information Resources 1
I Foreign manufacturer registered place of business in EU for CE certification EU Medical Device Regulations 1
M How to manage Sop's & other quality documents after business transfer Document Control Systems, Procedures, Forms and Templates 3
D QMS Realignment after business splits into 2 different companies AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
G Microsoft Office 365 Business plan questions Business Continuity & Resiliency Planning (BCRP) 10
S Business Number versus Company ID? Canada Medical Device Regulations 3
K Business Process Flowchart Process Maps, Process Mapping and Turtle Diagrams 2
Sidney Vianna Informational ESG - Environment, Social & Governance issues gaining ground in the Business World Sustainability, Green Initiatives and Ecology 22
N ISO 9001 - Training business with fewer than 5 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 4
S ISO 9001 implementation in a Gold exporting business ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
H Expanding our business and the implications to our QMS Manufacturing and Related Processes 2
M ISO 9001:2015 8.2.1 Contingency Plan required for small Business? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
Nicole Desouza ISO / AS Certification - Small business with less than 100 employees ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 7
R Supplier evaluation and business needs in the context of ISO 13485 ISO 13485:2016 - Medical Device Quality Management Systems 2
M Informational Australia – TGA business plan 2019-20 Medical Device and FDA Regulations and Standards News 0
A Brazil: Termination of business relations with BRH – what happens to registrations? Other Medical Device Regulations World-Wide 1
Jen Kirley Conway Business Services LLC - Jen Kirley ISO 14001:2015 Specific Discussions 0
J Business Intelligence and 21 CFR Part 11 Compliance Qualification and Validation (including 21 CFR Part 11) 1

Similar threads

Top Bottom