ISO has published ISO 22301:2012, Societal security – Business continuity management systems – Requirements, the first international, certifiable standard for business continuity management.
Key points
- It replaces the British Standard BS 25999-2 as the basis for certification.
- It follows ISO’s new common high-level structure for management system standards, making it easier to integrate with other standards such as ISO/IEC 27001.
- It places greater emphasis on setting objectives, monitoring performance and top management commitment.
- It requires a business impact analysis and risk assessment to drive continuity strategies, plans, exercising and testing.
Organisations certified to BS 25999-2 will need to plan a transition to ISO 22301 over the coming months. For those starting out, ISO 22301 provides a clear, internationally recognised framework for preparing for, responding to and recovering from disruptive incidents.
Source: ISO 22301:2012 (ISO)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
