ResourcesAdvanced Operational Excellence (ADOX) | Business Continuity & Operational Resilience - Consulting & Training

ISO 22301

The international standard for business continuity management systems, in ADOX’s own words.

The world’s common language for a BCMS.

ISO 22301:2019, Security and resilience, Business continuity management systems, Requirements, is the international standard for a business continuity management system (BCMS). It sets out a framework to plan, establish, implement, operate, monitor, review, maintain and continually improve a documented management system that protects against, reduces the likelihood of and ensures recovery from disruptive incidents. It replaced ISO 22301:2012, and the standard itself is bought from ISO.

Six facts in six lines.

01

Edition

ISO 22301:2019, edition 2.

02

Published

October 2019.

03

Status

Under systematic review, with a revised edition being developed. It has one amendment, Amendment 1 (2024), on climate action changes.

04

Committee

Developed by ISO technical committee ISO/TC 292 Security and resilience.

05

Length

21 pages.

06

Replaces

ISO 22301:2012.

A discipline that holds when disruption arrives.

Organisations face unforeseen disruption. ISO 22301 exists to build organisational resilience against it, to keep operations and services running, to identify risks early, to prepare for emergencies and to improve recovery time. It gives the discipline that holds when disruption arrives.

What a BCMS built on it delivers.

1

Resilience

Enhances organisational resilience against disruption.

2

Risk management

Improves risk management processes.

3

Crisis response

Brings a systematic response to crises.

4

Trust

Increases trust among stakeholders.

Organisations of all sizes.

ISO 22301 is written for organisations of all sizes, and it integrates with other ISO management standards. Related ISO publications include ISO 22313:2020, which gives guidance on using ISO 22301, and the broader family of ISO/IEC 27001 and ISO 31000.

Where it sits beside the rest.

ISO 22313:2020 gives guidance on the use of ISO 22301. In practice a BCMS built to ISO 22301 sits naturally beside the BCI Good Practice Guidelines (GPG 7.0) and the UAE NCEMA 7000 standard. See ADOX’s BCMS Framework Review page, the BCM Maturity Model page and the What is Business Continuity? guide.

ADOX works to the standard, and reviews against it.

ADOX develops its consulting and training solutions in adherence to ISO 22301, UAE NCEMA 7000 and the BCI Good Practice Guidelines (GPG 7.0). ADOX also conducts an independent ISO 22301 review and audit of an existing BCMS.

Three short answers.

What is ISO 22301?
ISO 22301:2019 is the international standard for business continuity management systems. It sets requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining and continually improving a documented BCMS.
Where can I read the standard itself?
The standard is bought from ISO. ADOX’s page is its own summary and is not an ISO publication.
Is a revised edition coming?
The standard is under systematic review and a revised edition is being developed.

Talk to ADOX about your BCMS.

We aim to reply to your enquiry within 2 hours.

Source: ISO, ISO 22301:2019 Security and resilience, Business continuity management systems, Requirements. This page is ADOX’s own summary and is not an ISO publication.

Built with Symphony.co