Better safe
than sorry
14 Nov 2007
Topics: Business continuity, BS 25999, Japan
Fujitsu Group is the world's third largest IT services provider, and counts among its customers half the Fortune Global 500. The Group first became seriously engaged in BCM in 2005 when the Japanese Government started to mandate it. Against a backdrop of apparently increasing natural disasters like earthquakes, infectious diseases (like a threatened flu pandemic) and terrorism, the Japanese Ministry of Economy, Trade and Industry (METI) published its Guide to establishing business continuity plans. At the same time, the Japanese Cabinet Office issued a Guide to Business Continuity which prompted Japanese companies to be ready for natural disasters. Both Guides indicated that companies should prepare appropriate business continuity planning (BCP) which takes their supply chains into account.
Coincidentally, says Toru Nishioka, Fujitsu's head of BCM Office: "One of our customers requested us to take action on business continuity as a condition of working with us." For Fujitsu, BCM was now firmly on its business agenda.
Added to that, Fujitsu is listed on the Dow Jones Sustainability Index and the FTSE4Good Index and is a recognized IT industry leader in sustainability and corporate responsibility. As such, Fujitsu realized that its BCM responsibility extended not only across its own operations, but that it also carried a considerable responsibility on behalf of its customers - many of whom provide information systems that form part of the social infrastructure or provide goods and services for manufacturers in the global supply chain.
Finally, Fujitsu also aimed to enhance its corporate value though strengthening its business continuity capability. A Business Continuity business unit was formed which now carries so much BCM experience and skills that Fujitsu is capable of delivering a high quality consulting services on business continuity and to provide comprehensive BCM solutions.
Identifying the issues
What are the BCM issues which Fujitsu faces? A key factor is that the company, with 160,000 global employees, has a breadth of different business units, each facing a different business environment and equipped with different resources. The challenge was to develop a fully integrated business continuity plan to cover the differing demands of all these business units.
To resolve this challenge, Fujitsu categorized all its business units into five groups in terms of business similarity, with each group giving priority to customers whose information systems were identified as having the biggest societal impact, such as utility companies, banks and hospitals.
These systems were then targeted with their own BCM programmes, as well as the maintenance support and outsourcing services which clients would need to return to normal service quickly in the event of a major disaster. The core team of business continuity experts worked to help each group establish and develop a BCP, while recognizing the important need to balance planning requirements between the five groups.
Links in the chain
Fujitsu also understood that developing robust BCP for itself alone was not enough to guarantee continuity of supply, since suppliers to Fujitsu were also in a position to cause considerable business disruption to Fujitsu's service and production processes. Says Nishioka: "Companies need to consider the whole supply chain as within the scope of their business continuity planning and implementation management."
Fujitsu has therefore taken action to strengthen the BCM capability of businesses all along its supply chain - aiming to enhance business continuity capability by supporting suppliers' business continuity activity. For example, it will do an assessment of a supplier's ability to continue to provide crucial components if disaster strikes, and assess the time it would take to resume its production process. Fujitsu will then help its suppliers to implement BCM in the light of the assessment results.
Moreover, in late 2007, Fujitsu plans to start offering formalised business continuity assessment services for supply chains, developed from the assessment work that it offers its suppliers, and in response to a need which Fujitsu's purchasing division has identified for a higher standard of BCM planning within suppliers' businesses.
Setting the standard
What role does BS 25999 play in Fujitsu's thinking? Says Nishioka: "Certification to BS 25999 is evidence of commitment to BCM. Also I would expect the BCM framework and processes clearly described in BS 25999 to promote understanding of business continuity both for customers and Fujitsu, which will result in time-saving and enhanced satisfaction on both sides."
He adds: "Of course, certification is not the final goal of Business Continuity Management. Fujitsu recognizes that business continuity is a customer requirement nowadays, as well as a mechanism which adds value to the products and services we provide to our customers."
Find out more about business continuity in our story Untangling the continuity web.
Business Standards © 2010. Editorial produced by Caspian Publishing in association with The British Standards Institution. Editorial opinions expressed on are not necessarily those of BSI Group or Caspian Publishing. Neither Caspian Publishing nor BSI Group accept responsibility for advertising or editorial content, nor for that appearing on linked third-party websites. Reproduction in whole or in part is forbidden without written permission from BSI Group or Caspian Publishing.
A clear case for carbon neutrality
"Carbon neutral" sounds good on paper, but what does it really mean? Organizations are making claims about carbon neutrality for everything from products to travel, events, projects and buildings. The problem is that no one quite agrees what "carbon neutral" means or how far it extends.
OCS, an international facilities services group based in the UK, has achieved triple certification to ISO 9001 Quality management, ISO 14001 Environmental management/ and BS OHSAS 18001 Health and safety management with BSI.
Until now, there has been no strict guidance in the UK relating to how audiovisual (AV) installations are carried out. This includes everything from computers and projectors to interactive whiteboards, plasma screens and loud speakers. For AV installation companies, processes can vary significantly.
Airbus in the UK has achieved certification to BS 25999, the Business Continuity Management (BCM) standard, following an audit from BSI. The certification covers Airbus? wing manufacturing site in Broughton, North Wales and becomes the first aerospace manufacturing company to receive certification to this standard by BSI.
Monarch Airlines chooses BSI for its European Union Emission Trading System (EU ETS) verification
Monarch Airlines has selected BSI as its provider of verification services against the requirements of the EU ETS directive. This comes in response to the industry's requirement to monitor its CO2 emissions and demonstrate compliance with the directive by submitting a verified annual emissions report by 31 March every year from 2011 onwards.
Question: Is the contribution made by standards always positive?
Standards can make an enormous contribution to organizations, businesses and society - a number of recent studies have confirmed this as an indisputable fact. But is the contribution they make always positive? In my role as chairman of the United Kingdom Accreditation Service (UKAS), I have a close understanding of the world of standards. Most of UKAS' accreditation work is based on standards - from the certification of quality and environmental management systems to a huge range of product testing and beyond.
Have a standards-related question for BSI or a comment on the website? We'll find the right person to answer.