What are the requirements of the ISO 22301 standard?
ISO 22301 requirements
ISO 22301 is an international standard that defines the requirements for a business continuity management system (BCMS). It is designed to help organizations provide a robust framework for business continuity management.
The ISO 22301 standard is divided into 10 clauses (chapters). The 242 requirements are in clauses 4 to 10. The clauses cover the following areas:
1. Scope:
This clause defines the purpose and scope of the standard.
2. Normative references:
This clause identifies the normative documents that are used or cited by the standard.
3. Terms and definitions:
This clause defines the terms used in the standard, see also the ISO 22300 standard.
4. Context of the organization
The organization shall:
- Identify the internal and external issues that are relevant to your BCMS
- Understand the needs and expectations of stakeholders
- Determine the extent of the scope of your BCMS
- Establish and maintain your BCMS and the relevant processes
5. Leadership
Top management shall:
- Commit to implementing and maintaining an effective BCMS
- Establish the business continuity policy
- Assign responsibilities and authorities to appropriate people
6. Planning
The organization shall:
- Determine BCMS risks and opportunities
- Establish business continuity objectives
- Plan actions to achieve these objectives
- Plan the necessary changes
7. Support
The organization shall:
- Provide the resources needed to implement and improve the BCMS
- Determine the required competence
- Raise staff awareness
- Establish an internal and external communication process
- Create and control the BCMS documentation
8. Realization
The organization shall:
- Plan, implement and control your operational processes
- Define the process Analyze the business impact
- Assess the risk
- Identify strategies and solutions
- Provide business continuity plans
- Maintain an exercise program
- Evaluate business continuity documentation and capabilities
9. Performance
The organization shall:
- Inspect, analyze and evaluate its performance
- Conduct internal audits
- Carry out management reviews
10. Improvement
The organization shall:
- Control nonconformities through corrective actions
- Continuoually improve your BCMS
To be ISO 22301 certified, an organization shall demonstrate that it meets all of the requirements of the standard. This demonstration is carried out by an accredited certification body.
The benefits of ISO 22301 certification are numerous, including:
- Better protection of the organization against disruptions. ISO 22301 certification can help the organization reduce the likelihood of disruptions occurring
- An improvement in the resilience of the organization. ISO 22301 certification can help the organization reduce the impact of disruptions and restore normal operations
- An increase in stakeholder confidence. ISO 22301 certification can help the organization improve their reputation by demonstrating their commitment to prevention
- Reduced costs associated with disruptions. ISO 22301 certification can help organization reduce costs of a major crisis
In conclusion, ISO 22301 is a valuable tool for organizations of all sizes that want to improve their preparedness against disruptions, reduce their risks and gain a competitive advantage.
