ISO 22301:2012 - Societal security -- Business continuity management systems --- Requirements

What is business continuity management and ISO 22301:2012?

Business continuity management involves the recovery or continuation of business activities in the event of any business disruption. The overall BCM programme must be managed through activities such as scoping, risk evaluation, business continuity strategy, business continuity objectives, development planning, training, exercises, testing, reviewing and continual development. Even if an organization has never experienced a serious incident, establishing a BCMS, built on ISO 22301, helps to define key business processes and the disruption that could result from any threats.
ISO 22301 provides a comprehensive set of controls based on BCM best practice, covering the whole BCM lifecycle.

It defines the strategic and tactical capability of an organization to plan for and respond to incidents and business
disruptions in order to continue business operations at an acceptable pre-defined level. The standard is generic and offers organizations guidance on putting their BCM systems in place. An organization can prepare for the worst and take steps to improve its resilience. The BCMS should also include risk assessment (RA) and business impact
analysis (BIA), which are an inherent part of ISO 22301 and an essential component to identifying prioritized
activities, dependencies, and resources supporting their key products and services, as well as what the impact of
their failure would be to the organization.

The benefits of ISO 22301:2012 certification to your organization

The ISO 22301 certification will help improve any business by ensuring planned, effective BCM at all levels, including:

  • organization-wide identification and understanding of critical business processes and the impact of disruption
  • increased levels of resilience and recovery capability, and the continued survival of the organization
  • the advantage gained over less resilient competitors
  • the positive message communicated to the media and stakeholders in crisis conditions
  • improved risk profile in the minds of insurers, resulting in reduced insurance premiums
  • compliance with the expectations of regulators, insurers, business partners and other key stakeholders
  • the significantly reduced financial impact of incidents, disruption or even under disaster
  • increase the survival chance of both the organization and employees
  • reputation maintained, or even improved, by demonstrating a professional approach to managing disruption
  • timely and orderly responses to incidents and business disruptions to continue business operations at
    an acceptable pre-defined level as promises in contract or agreement
  • encourages cross-team and cross-organization coordination
  • demonstrate credible responses through scenario-based exercising
  • demonstrate management commitment in overall risk management with visible evidence
How can we help you in achieving ISO 22301:2012 certification?

Our team of competent professionals will help you manage your business challenges, systems and risks to improve and protect your current and future environmental performance and meet your stakeholders’ needs.

  • Our in-depth understanding and the technical expertise of our auditors enables us to deliver tangible benefits to our clients through a structured project management approach
  • We know that good communication is pivotal in delivering transparency through every step of the BCM certification process; we work with our clients and set clear expectations for all parties on deliverables
  • Our unique methodology helps organizations manage their systems and risks to improve and protect their current and future performance. We provide certification across all of the major management system standards.
  • We can often offer integrated assessments, thus delivering savings on both time and money.

Let's help you

Through a unique & proven problem solving methodology that will best suit your business needs