ISO 22301
What is ISO 22301?
The international standard for Business Continuity Management Systems (BCMS) that specifies requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining, and continually improving a BCMS.
Terms that appear alongside iso 22301
Each of these is named in at least one of the same controls as iso 22301. The number is how many controls name both.
- business continuity 16 shared controls
- nist 14 shared controls
- resilience 12 shared controls
- disaster recovery 9 shared controls
- lessons learned 9 shared controls
- incident response 8 shared controls
- cybersecurity 8 shared controls
- crisis management 7 shared controls
Frameworks that govern iso 22301
What the standards actually require on iso 22301
Requirements naming iso 22301 across 6 standards, quoted from the control text.
Annex A maps each clause of this document to ISO 22301:2019 (4.1 refers to it), placing the BIA process within the BCMS: prerequisites against the leadership, roles and resources clauses and the BIA process against 8.2.2 and the strategy selection of 8.3.
iso-ts-22317-2021::A · Annex A BIA within the BCMS of ISO 22301:2019 (informative) →The BCP and DR policy adopts best practice such as ISO 22301 to reduce the likelihood and impact of disruptions and maintain continuity, and is updated after major developments and risk assessments.
rbi-cybersecurity-framework-for-banks::163 · Para 163: BCP and DR policy on best practice such as ISO 22301, updated on major developments →The organization should evaluate SCCM performance through the programme of 5.2.4, including exercising with suppliers of the kind Annex C describes and managing priority suppliers' disruptions as Annex B describes, and on the ISO 22301:2019 basis through monit...
iso-ts-22318-2021::7.3 · 7.3 Performance evaluation →ISMAP Cloud Governance establishes the management framework for Cloud Service Providers operating under ISMAP. (1) Information Security Management System (ISMS): based on ISO/IEC 27001:2022 + JIS Q 27001 (Japanese Industrial Standard equivalent) + ISMS-AC Info...
ISMAP-CloudGovernance-ISMS-RiskAssessment-SharedResponsibility-Policy-RegulatoryCompliance-RolesResponsibilities · ISMAP Cloud Governance - ISMS per ISO 27001/JIS Q 27001 + Risk Assessment + Shared Responsibility Model + Cloud Security Policy + Regulatory Compliance + Roles and Responsibilities →Guidance to put in place and keep the processes through which the BCMS satisfies ISO 22301, with the way they interact. When settling the processes and rolling them out, the organization works out what each needs as input and should produce as output;
iso-22313-2020-guidance-on-business-continuity-management-systems::4.4 · 4.4 Business continuity management system →The organization is to plan how it will keep information security at a suitable level while operations are disrupted. Purpose: protect information and associated assets during disruption.
iso-27002-2022::5.29 · Information security during disruption →Questions people ask about iso 22301
What is ISO 22301?
Why is ISO 22301 important for compliance?
Which compliance frameworks address ISO 22301?
Where can I learn more about ISO 22301?
See how ISO 22301 applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.