SV-22 / SERVICES
ISO 22301: stay operating when something goes wrong
ISO 22301 is the standard for business continuity management. It helps you prepare for disruptions such as outages, supplier failure, cyber incidents or loss of premises, so critical services continue or recover quickly.
ISO 22301 is the standard for business continuity management. It helps you prepare for disruptions such as outages, supplier failure, cyber incidents or loss of premises, so critical services continue or recover quickly. Regulated sectors and enterprise customers often expect evidence of continuity capability, not just a document.
What’s included
- Business impact analysis identifying critical activities and acceptable downtime
- Risk assessment of threats to people, premises, technology and suppliers
- Continuity strategies and solutions proportionate to your needs
- Business continuity and incident response plans, roles and communication trees
- Exercise and testing programme, with lessons captured
- Internal audit, management review and alignment with ISO 27001 where relevant
Best for
Financial and technology providers, healthcare and logistics operators, and organisations whose customers depend on continuous service.
How we work
- Impact analysis and scope. 2) Strategy and plan design. 3) Exercise the plans. 4) Audit preparation.
What you receive
Business impact analysis, risk assessment, continuity plans, exercise reports and an audit-readiness plan.
The result
A rehearsed, documented ability to keep serving customers through disruption.
Frequently asked questions
Is continuity the same as disaster recovery?
Disaster recovery focuses on restoring IT. Business continuity covers the whole organisation, including people, premises and suppliers.
Do we need to run exercises?
Yes. Untested plans tend to fail when needed, so testing is a central part of the standard.