ISO has published ISO 22301:2019, Security and resilience – Business continuity management systems – Requirements, replacing the 2012 edition.
What’s changed?
- Clearer, more concise requirements with less duplication and fewer prescriptive “documented information” demands.
- Updated terminology and a simpler structure for the operational clauses covering business impact analysis, risk assessment, strategies and solutions, plans and procedures, and exercising.
- Better alignment with ISO 22313 guidance and the wider ISO 22300 family.
The core of business continuity management is unchanged. Certified organisations will have a transition period, and the changes are evolutionary, so most mature BCMSs will need only modest updates.
Source: ISO 22301:2019 (ISO)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
