What is ISO 22301?
ISO 22301 is the international standard for business continuity management. It helps you work out which activities matter most, how long you could manage without them, and what you'll do to keep going or recover when something goes wrong, whether that's an IT failure, a cyber attack, a fire or flood, a key supplier going under, or the loss of key staff.
Who needs it?
- Suppliers in critical supply chains such as utilities, infrastructure and logistics
- Businesses whose customers ask for tested business continuity plans
- Organisations heavily dependent on IT systems, a single site or a few key suppliers
- Any business that wants to protect its revenue and reputation from disruption
Business benefits
ResiliencePlans that keep critical work going and speed up recovery.
Customer confidenceEvidence of continuity arrangements for contracts and supplier audits.
Known prioritiesA clear understanding of what matters most and how quickly it must be restored.
Tested plansExercises show your plans work before you need them.
How SBMS helps
- Gap analysisWe review your current continuity arrangements and agree the scope of your system.
- DocumentationWe carry out a business impact analysis and risk assessment, then write your continuity strategies and plans.
- ImplementationWe brief your team and set up roles, contact lists and response arrangements.
- Internal auditWe run an exercise to test your plans, audit the system and support your management review.
- Certification supportWe prepare you for the Stage 1 and Stage 2 audits.
- Ongoing maintenanceWe help you review, update and test plans as your business changes.
Typical timescales
Typically three to six months, depending on the size and complexity of the scope. A tightly scoped system for a single site can be quicker.