ISO 22301 requirements
ISO 22301 requirements help organisations define responsibilities, controls, evidence, performance review and continual improvement for business continuity management systems.
The main ISO 22301 requirement areas.
ISO 22301 follows a management system approach. It asks organisations to understand context, define leadership responsibilities, plan controls, support people and resources, operate the system, evaluate performance and improve.
This summary is for orientation only. Organisations should use the official standard when implementing or auditing a management system.
- Context and interested parties
- Leadership and policy
- Planning, risks and objectives
- Support and documented information
- Operational control
- Performance evaluation and audit
- Improvement and corrective action
Evidence proves the system is working.
ISO 22301 certification looks for evidence that controls are defined, used and improved. Records, audits, actions and management review outputs show whether the system is effective.