Business continuity management : part 2: specification (British Standards Institution, 2007)