ISO 22398:2013
What is ISO 22398:2013?
ISO 22398:2013 is the ISO guidance on exercises: how an organization plans, conducts and improves an exercise programme (needs analysis, base of support, aim and objectives, the programme manager, implementation, performance and programme monitoring, review) and each exercise project within it (foundation, performance objectives, team, risk, communication, resources, design, the nine exercise types and the discussion-based and operations-based methods, scenarios of events, incidents and injects; run-through, start-up briefing, launch, conduct and termination; debrief and after-action review), and how evaluation, the after-action report and management review with corrective action close the loop. It comprises 33 controls organised across 3 domains, and applies in International.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where ISO 22398:2013 overlaps with the standards you already hold
What ISO 22398:2013 means in your sector
What ISO 22398:2013 means for your job
Questions people ask about ISO 22398:2013
What is ISO 22398:2013?
How many controls does ISO 22398:2013 have?
Where does ISO 22398:2013 apply?
Which version of ISO 22398:2013 is covered here?
Query ISO 22398:2013 programmatically
ISO 22398:2013, its 33 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
ISO 22398:2013 API reference and MCP config →How ready are you for ISO 22398:2013?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.