many thanks to all replies
had i not made it clear in my post, please note that i am asking to see the format of audit report- business continuity management
thanks again/regards
Normally, BCP is responsibility of Operational Risk Function in a bank. For some customer-oriented functions like Payment Center, TSOs, .. we should have BCP available in case there are disasters, floods, ..
BCM means managing BCP.
I know for us, IT is the keeper of the BCP, but works with operations, management, and internal audit for the creation and testing. IT is responsible for our DR since it IT technical than our BCP.
Hope this helps!
Koo,
I am not really sure what you are hoping to see. As an IT auditor working in the government sector the prevailing attitude I have seen is BCP or BCM has been seen as a by product of the Disaster Recovery Programs. Despite my many meetings with…