ISO 22301 : Security and Resilience -
Business Continuity Management Systems

ISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually improve a documented management system to protect against, reduce the likelihood of occurrence, prepare for, respond to, and recover from disruptive incidents when they arise.

The outcomes of maintaining a BCMS are shaped by the organization’s legal, regulatory, organizational and industry requirements, products and services provided, processes employed, size and structure of the organization, and the requirements of its interested parties.

A BCMS emphasizes the importance of:

• Understanding the organization's needs and the necessity for establishing business continuity policies and objectives;
• Operating and maintaining processes, capabilities and response structures for ensuring the organization will survive disruptions;
• Monitoring and reviewing the performance and effectiveness of the BCMS;
• Continual improvement based on qualitative and quantitative measures.

Business Continuity includes three key elements:

• Resilience:
  critical business functions and the supporting infrastructure are designed and engineered in such a way that they are materially unaffected by most disruptions, for example through the use of redundancy and spare capacity,
• Recovery:
  arrangements are made to recover or restore critical and less critical business functions that fail for some reason.
• Contingency:
  the organization establishes a generalized capability and readiness to cope effectively with whatever major incidents and disasters occur, including those that were not, and perhaps could not, have been foreseen. Contingency preparations constitute a last-resort response if resilience and recovery arrangements should prove inadequate in practice.

Enquiry Now