Skip to content

Business Continuity Management

What is Business Continuity Management?

A holistic management process that identifies potential threats and their impacts, providing a framework for building organizational resilience.

Business Continuity

Each of these is named in at least one of the same controls as business continuity management. The number is how many controls name both.

What the standards actually require on business continuity management

Requirements naming business continuity management across 6 standards, quoted from the control text.

ISO 22301:20195 controls

Fix and document the boundaries of the BCMS, deciding which parts of the organization and which products and services fall inside it and justifying whatever is left outside.

iso-22301-2019::4.3 · Determining the scope of the business continuity management system

Guidance on establishing, implementing, maintaining, and continually improving a BCMS in accordance with ISO 22301.

ISO-22313-4.4 · Business continuity management system

Business continuity management shall be implemented to maintain critical business processes during and after disruptive events using BSI Standard 200-4.

DER.4 · Business Continuity Management

Keep approved business continuity and operational resilience policies and procedures, communicate them to the people who must act on them, and review them at least once a year.

CCM-BCR-01 · Business Continuity Management Policy and Procedures

As part of the overall business continuity policy, the AMSB sets and approves the ICT continuity policy, communicated appropriately within the undertaking and to relevant service providers.

EIOPA-ICTSG-GL.19 · Business continuity management

Establish written Incident Response Plan and Business Continuity and Disaster Recovery Plan reasonably designed to respond to and recover from material cybersecurity events.

§500.16 · Incident Response and Business Continuity Management

Questions people ask about business continuity management

What is Business Continuity Management?
A holistic management process that identifies potential threats and their impacts, providing a framework for building organizational resilience.
Why is Business Continuity Management important for compliance?
Business Continuity Management is a key concept in Business Continuity. Understanding business continuity management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Business Continuity Management?
Business Continuity Management appears in the requirement text of ISO 22301:2019, ISO 22313:2020 - Guidance on Business Continuity Management Systems, BSI IT-Grundschutz, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600). Across these standards we have identified 12 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity Management?
Explore our compliance framework pages to see how business continuity management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Business Continuity Management applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.