BSI PD ISO/IEC TS 30105-6:2021

$142.49

Information technology. IT Enabled Services-Business Process Outsourcing (ITES-BPO) lifecycle processes – Guidelines on risk management

Published By	Publication Date	Number of Pages
BSI	2021	28

Guaranteed Safe Checkout

Category: BSI

If you have any questions, feel free to reach out to our online customer service team by clicking on the bottom right corner. We’re here to assist you 24/7.
Email:[email protected]

This document provides guidance on risk management practices for the IT enabled services-business process outsourcing (ITES-BPO) service provider for the outsourced business processes. It provides guidance for planning, establishing, implementing, operating, monitoring, reviewing, maintaining and improving the risk management framework for the ITES-BPO services.

This document:

covers IT enabled business processes that are outsourced;
is applicable to the service provider;
is applicable to all lifecycle processes of ITES-BPO;
is not intended to cover IT services.

The guidelines in this document align to ISO 31000, elaborating the risk principles, risk management framework and risk management process from an ITES-BPO perspective.

PDF Catalog

PDF Pages	PDF Title
2	undefined
7	Foreword
8	Introduction
9	1 Scope 2 Normative references 3 Terms and definitions
10	4 Risk principles 4.1 Outcomes 4.1.1 General 4.1.2 Value creation and protection 4.2 Principles 4.2.1 Integrated risk management
11	4.2.2 Structured and comprehensive 4.2.3 Customized 4.2.4 Inclusive 4.2.5 Dynamic 4.2.6 Best available information
12	4.2.7 Human and cultural factors 4.2.8 Continual improvement 5 Risk management framework 5.1 General
13	5.2 Risk management framework design 5.2.1 General 5.2.2 Context
14	5.3 Risk culture 5.4 Risk management framework implementation 6 Risk management process 6.1 General
15	6.2 Scope, context and criteria 6.2.1 General 6.2.2 Scope 6.2.3 External and internal context
16	6.2.4 Criteria 6.3 Risk assessment 6.3.1 General
17	6.3.2 Risk identification 6.3.3 Risk analysis
18	6.3.4 Risk evaluation 6.4 Risk treatment 6.4.1 General 6.4.2 Risk mitigation 6.4.3 Risk avoidance
19	6.4.4 Risk transfer 6.4.5 Risk retention 7 Communication and reporting
20	8 Monitoring and review 8.1 General 8.2 Monitoring and management review 8.2.1 Monitoring
21	8.2.2 Management review 8.3 Key risk indicators (KRIs)
23	Annex A (informative) Case study
25	Annex B (informative) Indicative governance structure for risk management
26	Bibliography