Skip to content

Business Continuity Policy

What is Business Continuity Policy?

A high-level statement of an organization's commitment to maintaining operational continuity and defining the scope and objectives of its BCM program.

Business Continuity

What the standards actually require on business continuity policy

Requirements naming business continuity policy across 6 standards, quoted from the control text.

Guidance that the business continuity policy is kept current and available as documented information, is made known, understood and put into practice across the organization, and can be seen by the interested parties management has approved.

iso-22313-2020-guidance-on-business-continuity-management-systems::5.2.2 · 5.2.2 Communicating the business continuity policy →
ISO 22301:20194 controls

Hold the business continuity policy as documented information, communicate it within the organization, and make it available to interested parties where that is appropriate.

iso-22301-2019::5.2.2 · Communicating the business continuity policy →
COBIT 20191 control

The business continuity policy and scope are defined in line with the objectives of the enterprise and its stakeholders so that business resilience improves: the business processes and service activities, in-house and outsourced, that are critical to operation...

cobit-2019::DSS04.01 · DSS04.01 Define the business continuity policy, objectives and scope →

The ICT business continuity policy under DORA Article 11(1) must describe its objectives (linking ICT and overall continuity and using the BIA), scope with limitations and exclusions, the timeframe covered and the criteria for activating and deactivating conti...

dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::24 · Article 24: Components of the ICT business continuity policy →

The organization should have an IRBC policy that is developed, approved, regularly reviewed and updated so that it stays aligned with the organization's overall objectives and its business continuity policy.

iso-iec-27031-2011::5.7.2 · IRBC policy →
DORA1 control

Financial entities adopt an ICT business continuity policy within their overall continuity policy and implement it through documented arrangements that keep critical or important functions running, contain and resolve incidents, estimate preliminary impacts, a...

DORA-Art.11 · Response and recovery →

Questions people ask about business continuity policy

What is Business Continuity Policy?
A high-level statement of an organization's commitment to maintaining operational continuity and defining the scope and objectives of its BCM program.
Why is Business Continuity Policy important for compliance?
Business Continuity Policy is a key concept in Business Continuity. Understanding business continuity policy helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Business Continuity Policy?
Business Continuity Policy appears in the requirement text of ISO 22313:2020 - Guidance on Business Continuity Management Systems, ISO 22301:2019, COBIT 2019, DORA RTS on ICT Risk Management Framework (Commission Delegated Regulation (EU) 2024/1774), ISO/IEC 27031:2011. Across these standards we have identified 14 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Business Continuity Policy?
Explore our compliance framework pages to see how business continuity policy applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Business Continuity Policy applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.