ISO 22301 business continuity management system certification
An audited management system for continuity: impact analysis, recovery strategies, plans and exercises so critical services keep running or return within set times.
- 5requirementsin our own words
- 0editions none dated yet
- 0places where it is a duty of 30 assessed
- 18 Oct 2026last checkedat the sources below
Where it applies
It is voluntary in the 30 places assessed. The outcome holds under the conditions shown and says nothing about any one site.
| Where | Outcome | Basis | Conditions | Authority and route |
|---|---|---|---|---|
| All 30 places | Applies | Voluntary In force | None stated No law in this country requires it; customers, lenders or tenders decide. | Not stated |
What it asks for
5 requirements, each in our own words with the evidence an assessor would expect and who on a site usually owns it. Read the clause itself on the scheme owner's page.
| Requirement | Evidence expected | Owner | When |
|---|---|---|---|
| Analyse the business impact of disruption and the risks to critical services. | Impact analysis Record, checked by document review | Site manager | Every year Management system, the organisation |
| Write continuity and recovery plans with recovery objectives for critical services. | Plans and recovery objectives Policy, checked by document review | IT operations | Every year Management system, the organisation |
| Exercise the plans and record results. | Exercise reports Test report, checked by document review | IT operations | Every year Management system, the organisation |
| Define incident response and communication roles. | Response procedure and call tree Policy, checked by document review | Site manager | Every year Management system, the organisation |
| Audit and review the system at planned intervals. | Audit and review records Record, checked by document review | Quality | Every year Management system, the organisation |
About the programme
- Scheme owner
- ISO (standard); certificates issued by certification bodies
- Assessed by
- An accredited certification body
- Scope
- organisation or defined scope
- Levels
- single certificate
- Validity
- Certificate cycle not stated on an official page read in this pass; left blank rather than assumed.
- Accreditation route
- National accreditation body under EA (Reg. 765/2008)
- Who asks for it
- Financial-sector clients, Wholesale and hyperscale customers, Public tenders
- Where it is used
- global
Sources
Official bodies behind this page, each with the date we last read it.
No official body publishes a page for this scheme. The scheme owner's own page, linked under About the programme, is where the clauses are published.
Not legal advice. Confirm each duty against the text itself.