What is ISO 22301 about?
ISO 22301 is an international standard that focuses on societal security and requirements for a business continuity management system. ISO 22301 for business continuity management specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually improve a documented management system to protect against, reduce the likelihood of occurrence, prepare for, respond to, and recover from disruptive incidents when they arise.
The requirements specified in ISO 22301 are generic and intended to apply to all organizations, or parts thereof, regardless of type, size, and nature of the organization. The extent of application of these requirements depends on the organization’s operating environment and complexity.
Who is ISO 22301 for?
ISO 22301 on societal security and business continuity system is useful for:
- Local government personnel with continuity responsibilities under the CCA
- Senior business managers
- Continuity, risk and resilience managers and officers in all types of organizations
- Quality management industry
- Insurers
Why should you use ISO 22301?
ISO 22301 specifies requirements for setting up and managing an effective Business Continuity Management System (BCMS).
ISO 22301 also contributes to a more resilient society. The wider community and the impact of the organization’s environment on the organization and therefore other organizations may need to be involved in the recovery process.
ISO 22301 also covers the importance of BCMS:
- Understanding the organization’s needs and the necessity for establishing business continuity management policy and objectives.
- Implementing and operating controls and measures for managing an organization’s overall capability to manage disruptive incidents.
- Monitoring and reviewing the performance and effectiveness of the BCMS
- Continual improvement based on objective measurement.
ISO 22301 also informs that BCMS implementation:
- Protect life, assets, and the environment
- Protect and enhance the organization’s reputation and credibility
- Contribute to the organization’s competitive advantage by enabling it to operate during disruptions
- Reduce costs arising from disruptions and improve the organization’s capability to remain effective during them
- Contribute to the organization’s overall organizational resilience