What is ISO 22301
ISO 22301 is an international standard that defines the requirements for the development and implementation of an effective Business Continuity Management System (BCM).
It focuses on an organization's ability to recover, preventing malfunctions, such as a natural disaster, an economic crisis or data leaks, and ensuring the continuation of its operation, maintaining the provision of its products and services at a predetermined level, even after such incidents.
Which organizations can adopt ISO 22301
This standard is suitable for any organization, regardless of size or activity, that seeks to demonstrate to customers, partners, suppliers and shareholders the effective management of its business continuity. It is often adopted by organizations and companies such as:
- Banking institutions
- Telecommunications companies
- Energy suppliers
- IT companies and data centers
- Hospitals and healthcare providers
- Couriers/logistics firms
- Security firms
and more generally companies that seek to improve their ability to respond to and recover from disruptions, through the development of appropriate business continuity processes and tools.
For this reason, they place corresponding demands on their partners, extending this need to the entire supply chain.
Why you should get ISO 22301 certified
- It contributes to the identification of potential risks and threats, as well as their impacts on the functioning of the organization.
- It determines the financial consequences that may arise from an incident, through Business Impact Analysis.
- Supports the organization in developing a business continuity strategy
- Facilitates the preparation of a Disaster Recovery Plan, defining the mechanisms that will be activated in the event of a crisis
- Contributes to protecting the organization's reputation and ensuring its overall profitability
- It offers a competitive advantage in the market, as valid ISO 22301 certification is often a prerequisite for participation in public tenders and development programs.
ISO 22301 Certification Process
The initial assessment for obtaining ISO 22301 certification is carried out through a structured and transparent two-stage process:
Initial Assessment: Stage I Audit
Review of the completeness and adequacy of the organization's documented Business Continuity Management System
Initial Assessment: Stage II Audit
Review of the implementation and effectiveness of the management system. The audit examines all relevant information, performance targets, internal controls and processes, assessing the organization's full compliance with the selected ISO standard, and serves as the final step in achieving the organization's certification.
After a successfull evaluation, the company receives their ISO Certification, valid for 3 years.
Surveillance Audits
During the certificate's validity period, surveillance audits (2 in total) are conducted annually to confirm the seamless and continued implementation of the Management System.
Recertification is achieved by re-evaluating the Management System before the current certificate expires.
Relevant Documents
Management Systems Certification Regulation
Management Systems Certification Application
Related Services
