The guidebook provides practical guidance for TLD registry operators looking to establish, strengthen, or improve their Business Continuity Management System (BCMS), taking into account operational needs, regulatory developments, and recognised standards. Rather than keeping this as an internal resource only, the TLD ISAC decided to publish the guidebook under a Creative Commons License.

Here is an overview of what you can find in the guidebook:

• Understanding the foundations of business continuity management: An overview of BCMS concepts, terminology, relevant standards, regulatory considerations, and how business continuity aligns with information security management and other organisational processes.
• Establishing business continuity governance: Guidance on leadership responsibilities, governance structures, crisis management, decision-making, escalation paths, and documentation requirements.
• Planning and designing a BCMS: Practical guidance on identifying critical services, processes and dependencies, conducting business impact assessments, assessing threats, and developing continuity plans and playbooks.
• Supporting, testing and exercising continuity capabilities: Guidance on the resources, competence, awareness, communication, documentation, and exercises needed to ensure that continuity arrangements are effective in practice.
• Operating and continuously improving the BCMS: Approaches for monitoring performance, evaluating effectiveness, capturing lessons learned, and continuously improving business continuity capabilities.

The guidebook also includes practical examples, templates, threat assessment approaches, and tabletop exercise materials that can be adapted to individual registry environments.

You can download the guidebook here.