What is BSI Standard 100-4 and what are the phases of its emergency management lifecycle?

BSI 100-4 covers emergency management (business continuity), providing a methodology for establishing and maintaining an organization-wide emergency management system.

Key characteristics:

• Methodology for business continuity management (BCM)
• Creates a standalone management system for business continuity and emergency response
• Builds on the IT-Grundschutz methodology (BSI 100-2)
• Note: Still at version 100-4 (not yet updated to 200-x series)

The emergency management lifecycle (6 phases):

1. Initiation — Define responsibilities, organizational structures, emergency management guideline, involve employees
2. Conception — Business Impact Analysis (BIA), risk analysis, current state assessment, continuity strategies
3. Implementation — Cost and effort estimation, implementation prioritization, responsibilities, realization measures
4. Emergency response — Organizational procedures, crisis communication, emergency handbook
5. Testing and exercises — Exercise types, documentation, execution
6. Review and improvement — Self-assessment, revision, continuous improvement

Tip: Emergency management is about answering: "What do we do when something goes seriously wrong?" — it's the plan for when all your preventive measures fail.