ISO 22301:2019 Business Continuity Management

ISO 22301 defines a business continuity management system so that an organisation can sustain its critical activities during events such as earthquakes, fire, cyber attack and supply disruption. It is a key standard for banks, telecommunications, energy, logistics and data centres.

The audit covers the business impact analysis (BIA), recovery time objectives (RTO/RPO), tests of continuity plans and drill records.

• Records of table-top and field exercises carried out
• Alternate site and alternate supplier plans
• Joint audit with ISO 27001

At least one exercise (table-top or field) is expected to have been carried out before the audit and its results reviewed by management.