ISO 22301:2019 Business Continuity Management
Keep critical services running during a disruption.
- Standard code
- ISO 22301:2019
- Certification type
- Management system (ISO/IEC 17021-1)
- Initial audit duration (45 employees)
- 5.5 man-days
ISO/IEC 27001:2022 Information Security
Protect information assets with 93 controls.
ISO/IEC 27001 sets out the requirements for establishing, implementing and continually improving an information security management system. With the 2022 version Annex A has been reduced to 93 controls in four themes.
The audit checks the risk assessment methodology, the Statement of Applicability, access management, incident management and business continuity records. It is often a contract requirement in software, cloud, finance and healthcare.
- Transition from the 2013 version was completed in October 2025
- Remote and on-site audits can be combined
- Controls that overlap with KVKK technical measures
When setting the scope, the systems, sites and teams included must be written clearly; justification for areas excluded is stated in the SoA.
Main requirements
- Risk assessment methodology
- Statement of Applicability
- Incident and continuity records
Certification details
| Number of controls | 93 |
|---|---|
| Certificate validity | 3 years |
| Audit format | Hybrid |
Documents
Similar items
ISO/IEC 20000-1:2018 IT Service Management
Manage IT services in line with ITIL.
- Standard code
- ISO/IEC 20000-1:2018
- Certification type
- Management system (ISO/IEC 17021-1)
- Initial audit duration (45 employees)
- 6 man-days
ISO 9001:2015 Quality Management System
Customer satisfaction and the process approach.
- Standard code
- ISO 9001:2015
- Certification type
- Management system (ISO/IEC 17021-1)
- Initial audit duration (45 employees)
- 5.5 man-days