Skip to content

Business Continuity Policy

What is Business Continuity Policy?

A high-level statement of an organization's commitment to maintaining operational continuity and defining the scope and objectives of its BCM program.

Business Continuity

Frameworks that govern business continuity policy

NIST Cybersecurity Framework 2.0View framework →ISO 27001:2022View framework →

What the standards actually require on business continuity policy

Requirements naming business continuity policy across 6 standards, quoted from the control text.

ISO 22301:20194 controls

Hold the business continuity policy as documented information, communicate it within the organization, and make it available to interested parties where that is appropriate.

iso-22301-2019::5.2.2 · Communicating the business continuity policy →
ISO 223161 control

Business continuity policy. Control from ISO 22316 framework, domain: ISO 22316: BCM Program Management.

ISO22316-01 · Organizational resilience and security - business continuity policy for building security and resilience →
ISO 223171 control

Business continuity policy. Control from ISO 22317 framework, domain: ISO 22317: BCM Program Management.

ISO22317-01 · Business continuity policy →
ISO 223181 control

Business continuity policy. Control from ISO 22318 framework, domain: ISO 22318: BCM Program Management.

ISO22318-01 · Business continuity policy →
DORA1 control

Financial entities shall put in place an ICT business continuity policy and ICT response and recovery plans (including measures, procedures and arrangements) to ensure continuity of critical or important functions, quickly contain damage, resume activities and...

DORA-Art.11 · Response and recovery →
EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600)1 control

As part of the overall business continuity policy, the AMSB sets and approves the ICT continuity policy, communicated appropriately within the undertaking and to relevant service providers.

EIOPA-ICTSG-GL.19 · Business continuity management →

Questions people ask about business continuity policy

What is Business Continuity Policy?
A high-level statement of an organization's commitment to maintaining operational continuity and defining the scope and objectives of its BCM program.
Why is Business Continuity Policy important for compliance?
Business Continuity Policy is a key concept in Business Continuity. Understanding business continuity policy helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Business Continuity Policy?
Business Continuity Policy appears in the requirement text of ISO 22301:2019, ISO 22316, ISO 22317, ISO 22318, DORA. Across these standards we have identified 9 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity Policy?
Explore our compliance framework pages to see how business continuity policy applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Business Continuity Policy applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.