Skip to content

Business Continuity Management

What is Business Continuity Management?

A holistic management process that identifies potential threats and their impacts, providing a framework for building organizational resilience.

Business Continuity

Each of these is named in at least one of the same controls as business continuity management. The number is how many controls name both.

What the standards actually require on business continuity management

Requirements naming business continuity management across 6 standards, quoted from the control text.

Policies define exercise and testing expectations and strategies: key roles and responsibilities, minimum frequency, scope and reporting, consistent documentation, a process for correcting deficiencies, testing of communication and connectivity with third-part...

ffiec-it-examination-handbook::BCM-VII.B · VII.B Exercise and Test Policy (Business Continuity Management) →

Change management is an important part of all management processes; changes to the BCMS, including those arising under 10.1, should be planned carefully to ensure the intended purpose is fully examined and understood, considering the consequences of the propos...

iso-22313-2020-guidance-on-business-continuity-management-systems::6.3 · 6.3 Planning changes to the business continuity management system →
ISO 22301:20195 controls

Fix and document the boundaries of the BCMS, deciding which parts of the organization and which products and services fall inside it and justifying whatever is left outside.

iso-22301-2019::4.3 · Determining the scope of the business continuity management system →

Describes the requirements that keep information security assured even in critical situations, by embedding the corresponding measures in a holistic business continuity management and considering everything required to maintain information security during dama...

bsi-it-grundschutz::DER.4 · DER.4 Notfallmanagement (Business Continuity Management) →

Keep approved business continuity and operational resilience policies and procedures, communicate them to the people who must act on them, and review them at least once a year.

CCM-BCR-01 · Business Continuity Management Policy and Procedures →

Policies and procedures for continuity management and for operational resilience are approved, documented, communicated, applied, evaluated and kept current, with a review and update at least once a year and after significant changes.

cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::BCR-01 · Business Continuity Management Policy and Procedures →

Questions people ask about business continuity management

What is Business Continuity Management?
A holistic management process that identifies potential threats and their impacts, providing a framework for building organizational resilience.
Why is Business Continuity Management important for compliance?
Business Continuity Management is a key concept in Business Continuity. Understanding business continuity management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Business Continuity Management?
Business Continuity Management appears in the requirement text of FFIEC IT Examination Handbook, ISO 22313:2020 - Guidance on Business Continuity Management Systems, ISO 22301:2019, BSI IT-Grundschutz, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1. Across these standards we have identified 47 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity Management?
Explore our compliance framework pages to see how business continuity management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Business Continuity Management applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.