ISO 22301 - Business Continuity Management System
What is ISO 22301?
ISO 22301 is the standard for a Business Continuity Management System. It defines how a business identifies its critical activities, assesses the impact of a disruption and plans recovery within predefined timeframes, so that it keeps operating under crisis conditions.
Who is ISO 22301 for?
It applies to hotels and tourism businesses, IT companies and service providers, logistics and supply chain operators, food manufacturers, financial institutions, and critical infrastructure entities falling under the NIS2 Directive.
Benefits of ISO 22301
- Prioritisation of critical activities through business impact analysis
- Predefined recovery time and recovery point objectives
- Lower cost and shorter duration of operational disruption
- Plans that have been tested in real exercises
- Coverage of contractual requirements set by large clients
- More favourable insurance terms
- Support for compliance with the NIS2 Directive
- Structured crisis communication towards clients and authorities
Certification Requirements
The ISO 22301 management system must meet the applicable legal and contractual requirements concerning the business, as well as the requirements of the standard. A documented business impact analysis, a risk assessment, continuity plans and periodic testing with recorded results are required.