ISO/IEC 22301

Security and resilience

Business continuity management systems — Requirements

ISO/IEC 22301 provides guidelines for establishing a business continuity management system (BCMS). It aids organizations in preparing for, responding to, and recovering from disruptive incidents, ensuring that critical operations continue smoothly. The standard emphasizes risk management, resilience, and the need for continuous improvement to effectively mitigate potential threats and maintain business functions.

Covering the entire lifecycle of a BCMS, from planning to review, ISO/IEC 22301 helps organizations build a structured approach to manage risks and enhance their ability to withstand unexpected events. It encourages regular testing and updates to ensure the system remains effective and relevant. Ultimately, the standard aims to fortify an organization's infrastructure, ensuring operational continuity in the face of disruptions.

Request a proposal

Advantages of ISO/IEC 22301

Stakeholder Confidence: Builds trust with clients, partners, and investors by showing your commitment to maintaining continuous operations.
Enhanced Resilience: Demonstrates your organization’s ability to withstand and quickly recover from disruptions.
Competitive Advantage: Differentiates your organization in the market, making you a preferred choice for contracts and partnerships.
Regulatory Compliance: Helps meet legal and regulatory requirements related to business continuity and risk management.
Continuous Improvement: Encourages regular reviews and updates to your business continuity plans, ensuring they remain effective and up-to-date

Damage limitation – maintaining performance

Business processes are becoming more susceptible to disruption in all sectors, both in SMEs and large companies. The main reason for this is the increasing use of computerised operations; on the other hand, outsourcing, outtasking and integration into international partnership networks mean that even crises in distant countries can have a significant impact on the situation at home.

A BCMS ISO 22301 can draw up a contingency plan for such cases and offers the opportunity to maintain business operations even under difficult conditions or to restore them as quickly as possible after an interruption. In this way, financial and immaterial damage can be limited and interruptions that could jeopardise the company can be avoided or minimised.

Climate change – additions to management system standards

In a joint declaration in February 2024, the International Accreditation Forum (IAF) and the International Organisation for Standardisation (ISO) explained the additions to various management system standards. The statement emphasises the importance of taking climate change into account in the various management systems.

Sections 4.1 and 4.2 of the respective standard are affected. The additions are intended to ensure that climate change issues are considered by the organisations in addition to all other aspects in connection with the effectiveness of the management systems.

Certification Audit Process

1

01

Request for A Proposal: Company interested in certifying against ISO/IEC 22301 requests for a proposal from TUV NORD (Thailand)

2

02

Certification Audit: Stage 1: Documentation Review

3

03

Issue of ISO/IEC 27001 Certificate

4

04

Surveillance Audit 1 & 2 (within the next 2 years after the certificate is issued)

5

05

Re-certification within the next 3 years after the certificate issued.

Building Resilience Through Business Continuity

In a world of increasing uncertainty, the ability to respond to and recover from unexpected disruptions is a critical factor in an organization's success and long-term sustainability.

ISO 22301 helps organizations establish a structured Business Continuity Management System (BCMS), enabling them to minimize disruption, maintain critical operations, and recover effectively from unexpected events.

Contact us