ISO 22301:2019Quality & SafetySAC Accredited UKAS Accredited IAF Accredited

Business Continuity Management Systems (BCMS)

Ensure operational resilience, crisis survival, and continuous service delivery during catastrophic disruptions.

Standard Scope & Purpose

ISO 22301:2019 specifies requirements to implement, maintain and improve a management system to protect against, reduce the likelihood of the occurrence of, prepare for, respond to and recover from disruptions when they arise. It enables businesses to safeguard mission-critical processes during natural disasters, cyber incidents, and supply chain breakdowns.

Strategic Commercial & Operational Benefits

Safeguard enterprise reputation, share value, and customer contracts during severe outages

Establish validated Maximum Tolerable Period of Disruption (MTPD) and Recovery Time Objectives (RTO)

Fulfill MAS (Singapore), Bank of England, and international central bank operational resilience mandates

Lower business interruption insurance premiums and mitigate contractual non-performance penalties

High-Level Structure & Core Clauses

Clause 8.2

Business Impact Analysis (BIA) & Risk Assessment

Identifying prioritized activities, dependency mapping, and disruption cost thresholds.

Clause 8.3

Business Continuity Strategies & Solutions

Redundancy, secondary sites, alternative suppliers, and cyber-resilience failovers.

Clause 8.4

Business Continuity Plans (BCP) & Procedures

Incident response teams, escalation thresholds, and crisis communication protocols.

Clause 8.5

Exercise & Testing Programme

Desktop walkthroughs, tabletop simulations, and live operational switchover exercises.

Frequently Asked Questions (Technical Secretariat)

Q:How does ISO 22301 differ from IT Disaster Recovery (DR)?

IT Disaster Recovery focuses solely on restoring technology and servers. ISO 22301 covers holistic enterprise continuity, including people, physical premises, customer communications, supply chain logistics, and regulatory reporting.

Certification Scheme Profile

Audit Cycle

3-Year Certification Cycle (Readiness Pre-Assessment, Stage 1 & 2 Audits, Annual Simulation Reviews)

Surveillance Mandate

Annual Surveillance with live crisis simulation and drill verification

Accrediting Authorities

SAC Accredited UKAS Accredited IAF Accredited

Target Sectors

Banking, Financial Services & Capital Markets (BFSI)
Telecommunications & Critical National Infrastructure (CNI)
Energy Utilities, Water Treatment & Power Grids
Healthcare, Pharmaceuticals & Emergency Services
Data Centers, Cloud Providers & Managed Services

Compliant with IAF MD5 Manday Assessment

Included Accreditation Deliverables:

Accredited ISO 22301:2019 Certificate of Conformity
Business Impact Analysis (BIA) & Disaster Recovery Audit Dossier
Operational Resilience Benchmark Rating