Skip to content

Business Continuity

What is Business Continuity?

The capability of an organisation to continue delivering products or services at acceptable levels following a disruptive incident. Governed by frameworks like ISO 22301.

Risk Management

Related terms

BIA (Business Impact Analysis)Disaster Recovery

Frameworks that govern business continuity

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →

What the standards actually require on business continuity

Requirements naming business continuity across 6 standards, quoted from the control text.

ISO 22301:201919 controls

Set business continuity objectives and plan concretely how each of them will be achieved.

iso-22301-2019::6.2 · Business continuity objectives and planning to achieve them →
APRA CPS 230 Operational Risk Management12 controls

The entity must update its business continuity plan as necessary on an annual basis to reflect changes in legal or organisational structure, business mix, strategy or risk profile and to close shortcomings found through review and testing.

CPS230-P45 · Annual Update of the Business Continuity Plan →
CFTC System Safeguards (17 CFR 37, 38, 39, 49)9 controls

Address business continuity and disaster recovery planning and resources within the program, including regular periodic testing and review of those capabilities and the controls described in the recovery paragraphs of the section.

CFTC-SS-22 · Business Continuity and Disaster Recovery Planning Category →
ISO 22313:2020 - Guidance on Business Continuity Management Systems9 controls

Guidance on establishing and implementing documented plans and procedures for responding to disruptions.

ISO-22313-8.4 · Business continuity plans and procedures →
ISO 223167 controls

Business continuity policy. Control from ISO 22316 framework, domain: ISO 22316: BCM Program Management.

ISO22316-01 · Organizational resilience and security - business continuity policy for building security and resilience →
ISO 223177 controls

Business continuity policy. Control from ISO 22317 framework, domain: ISO 22317: BCM Program Management.

ISO22317-01 · Business continuity policy →

Questions people ask about business continuity

What is Business Continuity?
The capability of an organisation to continue delivering products or services at acceptable levels following a disruptive incident. Governed by frameworks like ISO 22301.
Why is Business Continuity important for compliance?
Business Continuity is a key concept in Risk Management. Understanding business continuity helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
What concepts are related to Business Continuity?
Key concepts related to Business Continuity include BIA (Business Impact Analysis), Disaster Recovery. Understanding these interconnected concepts provides a more comprehensive view of Risk Management requirements and helps organizations build holistic compliance programs.
Which compliance frameworks address Business Continuity?
Business Continuity appears in the requirement text of ISO 22301:2019, APRA CPS 230 Operational Risk Management, CFTC System Safeguards (17 CFR 37, 38, 39, 49), ISO 22313:2020 - Guidance on Business Continuity Management Systems, ISO 22316. Across these standards we have identified 63 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity?
Explore our compliance framework pages to see how business continuity applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Business Continuity applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.