GB/T 38299-2019Societal security - Business continuity management systems - Guidelines for supply chain continuity (English PDF)

Foreword

This standard was drafted in accordance with the rules given in GB/T 1.1-2009.

This standard uses the translation method equivalent to ISO 22318..2015 "Public Safety Business Continuity Management System Supply Chain Continuity Guidelines

south".

The Chinese documents that have a consistent correspondence with the international documents referenced normatively in this standard are as follows.

--- GB/T 30146-2013 Public Safety Business Continuity Management System Requirements (ISO 22301..2012, IDT)

This standard is proposed and managed by the National Public Safety Basic Standardization Technical Committee (SAC/TC351).

This standard was drafted. China National Institute of Standardization, Nanjing Weigang Dairy Co., Ltd., China Information Security Certification Center, Xianheng International Branch

Technology Co., Ltd., State Grid Shandong Electric Power Company, Beijing Urban System Engineering Research Center, Guangfa Bank Co., Ltd.

Xin, Beijing Labor Protection Science Research Institute, China Southern Power Grid Science Research Institute Co., Ltd., British Standard Certification Technical Training (Beijing) Limited

the company.

Introduction

GB/T 30146 and GB/T 31595 provide business continuity guidance for organizations on how to maintain supply chain continuity.

In-depth expansion. This standard assumes that organizations conducting supply chain continuity management (SCCM) understand the principles of business continuity management, and

A business continuity management system (BCMS) that complies with relevant standards has been established or is being prepared. In addition, this standard deals with

Impact of continuity management of service providers on the organization.

This standard is used by those who are responsible for purchasing and managing the necessary products or services of the organization, and help them implement it in accordance with established standards.

BCM practice.

The organization relies on suppliers to deliver products or services that meet agreed quality and standards on time. For organizations, identify supply chain disruptions

The potential impact on activities is very important, and this is also an important part of business continuity management. Suppliers fail to deliver on time to meet agreed quality and

Cost products or services can trigger business disruptions. Conflicting goals can be achieved by reducing supply chain costs (e.g.

Time and buffer inventory) and management of supply chain continuity risks (such as a single source, rely on timely supply) to solve.

This standard applies to products and services provided by external and internal suppliers with continuous supply relationships in the same organization, and

Organize an additional purchase arrangement.

Suppliers are ranked according to the impact of their product or service supply disruption on the organization, and the supplier level is used to determine the supplier

Relationship with the organization. Tier 1 suppliers have a direct contractual relationship with the organization, while Tier 2 suppliers provide products and services to Tier 1 suppliers. with

Such supply chain continuity concerns apply to suppliers at all levels. Tier 1 suppliers need to ensure their supply chain relationships and inform customers

The supply chain outside the level has sufficient toughness, and the social responsibility of suppliers outside the level 1.

The guidance given in this standard helps suppliers meet their customers' business continuity expectations and analyzes the

Weakness.

This standard recommends that suppliers also abide by the provisions of the ISO 28000 series on supply chain security management. Following these standards will have

Helps organizations increase supply chain resilience and reduce the risk of disruptions when purchasing products and services.

The elements of business continuity management are shown in Figure 1. The correspondence between this standard and the elements of business continuity management is shown in Table 1.

Figure 1 Elements of Business Continuity Management (BCM)

Table 1 Correspondence between business continuity management elements and chapters of this standard

BCMS elements of this standard

Planning and Control of Implementation Chapter 4

Business Impact Analysis and Risk Assessment Chapter 5

Business Continuity Strategy Chapter 6

Establish and implement business continuity procedures Chapter 7

Walkthroughs and Tests Chapter 8

Public safety business continuity management system

Supply chain continuity guide

1 Scope

This standard provides methods to understand and extend the BCM principles of supplier relationship management in GB/T 30146 and GB/T 31595.

This standard is universal and applicable to all types, sizes, and business nature of an organization (or part of an organization), both inside and outside the organization

Supply of products and services. The extent to which this standard is applied depends on the operating environment and complexity of the organization.

Supply chain management addresses activities related to the supply of products or services to an organization. This standard focuses on the organization's ability to maintain business activities

Or the continuous supply of products and services faced by the process, and the continuity strategies used by suppliers in the supply chain to reduce the impact of disruptions, that is,

Supply Chain Continuity Management (SCCM).

GB/T 30146 and GB/T 31595 give relevant guidance for formulating business continuity plans and establishing business continuity management systems.

2 Normative references

The following documents are essential for the application of this document. For dated references, only the dated version applies to this article

Pieces. For undated references, the latest version (including all amendments) applies to this document.

ISO 22300 Public Security Terminology

ISO 22301 requirements for public security business continuity management systems (Societalsecurity-Businesscontinuity

managementsystems-Requirements)

3 terms and definitions

The following terms and definitions apply to this document.

3.1

Business continuity

The ability of an organization to continue to provide products or services at a predefined level that is acceptable after a disruptive incident.

[ISO 22300..2012, definition 2.1.10]

3.2

Business impact analysis; BIA

The process of analyzing the impact of activities and business disruptions.

[ISO 22300..2012, definition 2.2.6]

3.3

Event

The occurrence or change of a particular set of conditions.

Note 1. Events can occur one or more times and there may be multiple reasons.

Note 2. Events can include things that are not happening.

Note 3. Events can sometimes develop into "incidents" or "accidents".

Note 4. An inconsequential state of affairs may also be referred to as "attempt", "close to happen" or "urgent".

[ISO 22300..2012, definition 2.1.8]