ISO 22301

ISO 22301:2019

Business Continuity Management Systems

A resilience framework for preparing for, responding to and recovering from disruptive incidents.

ISO 22301:2019 service visual

Who this standard can apply to

Financial and technology organizations
Education and healthcare providers
Government and critical-service organizations
Manufacturing and supply-chain businesses
Organizations requiring operational resilience

Typical areas reviewed

Business impact analysis
Continuity risk assessment
Response and recovery strategies
Exercises and testing
Performance review and improvement

Certification pathway

Application & Scope

Confirm the organization, sites, activities, requested standard and intended certification scope.

Document Review

Review relevant policies, procedures, records, objectives and management-system evidence.

Assessment / Audit

Evaluate implementation and objective evidence against the applicable requirements and approved arrangement.

Findings & Corrective Action

Where findings are identified, corrective action and supporting evidence are reviewed before closure.

Decision & Status

A defined decision is recorded with scope, validity and any applicable conditions or limitations.

Surveillance & Renewal

Ongoing status, surveillance and renewal requirements are managed according to the applicable certification arrangement.

Scope & Transparency

Certification, where offered, applies only to the defined management-system scope and responsible certification arrangement. It does not mean that ISO itself has certified or endorsed the organization.