Business continuity
Make business continuity a tested capability.
ISO 22301 provides requirements for a business continuity management system. We help teams identify critical activities, set recovery priorities, run exercises, and use the results to improve the system.
Our implementation focus
Make the requirements operational.
- 01
Define BCMS scope and critical services
- 02
Perform business impact and continuity risk assessments
- 03
Set recovery strategies and accountable owners
- 04
Exercise response and recovery arrangements
- 05
Run internal review and corrective action
Normstone advises on implementation and readiness. An independent certification body makes any ISO 22301 certification decision.
Questions we hear
Get the distinctions right.
Is a disaster recovery plan enough for ISO 22301?
No. Technology recovery is one part of continuity. The management system also addresses scope, business impact, strategies, people, suppliers, exercises, review, and improvement.
Can ISO 22301 work alongside ISO/IEC 27001?
Yes. The management systems can share governance and evidence processes while keeping continuity and information security objectives distinct.
Work with Normstone
Build a defensible path to readiness.
Tell us the outcome you need and the markets involved. We’ll help define the work.