ISO 22301
Certification
Business Continuity Management Systems (BCMS)
ISO 22301
Certification
Business Continuity Management Systems (BCMS)
Protect your organisation from disruption and crisis with ISO 22301 certification.
- ISO 22301 is the international standard for Business Continuity Management Systems (BCMS).
- It provides a framework for implementing a documented management system to help your business identify and protect against disruptive incidents.
- The standard helps organisations build resilience and develop the ability to respond and recover quickly, keeping business operations running.
- Achieving ISO 22301 certification can help you win new customers by providing evidence that you are a reliable partner.
- ISOQAR has the expertise and resources to help you gain UKAS-accredited ISO 22301 certification. We offer a completely transparent, simplified approach with no hidden fees.
Got a query, or need to speak to an advisor? Get in Touch
Get a quote
Join 1000’s of satisfied customers today
Benefits of ISO 22301
- Risk management
- Contingency plans
- Respond effectively
- Minimise loss and disruption
- Crisis management
- Win more business
- Demonstrate compliance
What is ISO 22301 certification?
ISO 22301 Business Continuity Management, or ISO 22301:2019, is an international standard that helps organisations prepare for, respond to and recover from disruption. The ISO 22301 framework:
- Provides guidance for developing, implementing and maintaining a structured and formalised business continuity management system (BCMS).
- Enables organisations to identify and plan for events that could disrupt business operations, such as fire, floods, criminal acts, IT service failures and staff shortages.
- Allows you to put recovery plans in place to ensure the smooth running of critical business functions during a time of crisis.
Holding ISO 22301 certification helps businesses minimise risk and demonstrates to stakeholders that your business continuity capability is appropriate to the size and complexity of your organisation.
Why choose ISO 22301?
Becoming ISO 22301 certified:
- Gives you the ability to identify and mitigate current threats and potential crises in your business, improving resilience.
- Provides a rehearsed method of restoring the ability to supply critical products and services, helping to minimise the loss and disruption caused by these incidents.
- Ensures the smooth running of critical business systems.
- Helps to make sure that unavoidable downtime is minimised and that you can recover as quickly as possible.
- Delivers a proven capability for managing a disruption, protecting (and enhancing) your business’s reputation and brand.
Learn more about ISO 22301 certification
ISO 22301 requirements
Wondering how to get ISO 22301 certification? If you’re new to the standard, our guide to ISO 22301 requirements will give you a clear understanding of the system and how to implement it. Think of it as your free ISO 22301 checklist.
This guide is for you if:
- You’re planning to implement ISO 22301 and want a plain English explanation of the requirements
- You’re currently working on ISO 22301 implementation and need to know what else must be done to achieve certification
- You already have a business continuity plan in place and want to understand how to formalise it into a certified BCMS
Download guide to ISO 22301 certification requirements
Discover the key requirements for successful ISO 22301 accreditation.
ISO 22301 implementation
7 steps to becoming ISO 22301 certified
Implementing ISO 22301 is simple, and we are here to support you at every stage. Just follow these 7 straightforward steps.
Step 1 - Read the Standard
It’s what you will be audited against.
Step 2 - Build Your Team
Get support from colleagues – you can’t do it all on your own.
Step 3 - Get the Skills
Book onto Academy training
Step 4 - Develop Your Management System
Do it yourself or consider using a consultant from the ISOQAR Associate Network (IAN)
Step 5 - Implement Your Management System
Make sure everyone is buying into it.
Step 6 - Check Everything
Carry out an internal audit – we can perform a pre-assessment audit for you.
Step 7 - Get Certified
Shout about your success! We give you logos to display your achievement on your website, stationery and vehicles.
How to implement ISO 22301
ISOQAR is accredited by the United Kingdom Accreditation Service (UKAS), the government-recognised accreditation body for the UK. As with other UKAS-accredited ISO 22301 certification companies, we have a duty to remain impartial; we can’t help you implement the standard if we will also be carrying out the audit.
Don’t worry, though – we’ve got you covered. Here are two methods you can use to implement ISO 22301 in your organisation:
Use an ISO consultant
There are many consultants available to help you. You can find them on our online database.
A consultant will take you from the beginning right through to certification. Consultants bring a wealth of experience and can share best practice from their work with other organisations.
Do it yourself
We will put together a package of support to help you through the complete journey.
A good starting point is to go on a foundation training course with the Academy. They deliver exceptional training whether you’re a beginner or an expert. Most of the courses are CQI IRCA accredited and are run by our own trainers.
ISO 22301 FAQs
We receive many questions from customers about ISO 22301 Business Continuity Management certification. Below, you’ll find some of the most common questions with answers written by our experts.
If you have any further queries, speak with our knowledgeable team on 0330 828 2752.
Why is ISO 22301 important?
ISO 22301 certification helps organisations prepare for, respond to and recover from disruptive incidents. One of the key ISO 22301 benefits is that it provides a structured approach to business continuity, helping to minimise downtime and reassure customers that your organisation can continue operating when unexpected events occur.
Is ISO 22301 a legal requirement?
No. The ISO 22301 standard is voluntary and there is no legal requirement to become certified. However, many organisations choose to implement it because it supports regulatory compliance, demonstrates good governance and helps satisfy customer, contractual or stakeholder expectations.
What kinds of organisations benefit from ISO 22301 certification?
Any organisation can benefit from ISO 22301 certification, regardless of its size or sector. A certified Business Continuity Management System (BCMS) helps organisations identify potential disruptions, reduce operational risk and improve resilience. It is particularly valuable for businesses that provide critical services, operate within regulated industries or rely on maintaining uninterrupted operations.
How many companies are ISO 22301 certified?
There is no official register that records exactly how many organisations are ISO 22301 certified. However, the standard is widely recognised around the world and continues to be adopted by organisations that want to strengthen their business continuity arrangements and demonstrate resilience to customers and stakeholders.
How can ISO 22301 compliance help me win more business?
Demonstrating ISO 22301 compliance shows potential customers that your organisation has robust plans in place to continue delivering products or services during unexpected disruption. This can strengthen trust, support supplier approval processes and improve your competitiveness when bidding for contracts, particularly within the public sector or highly regulated industries.
What is the latest version of ISO 22301?
The latest version of ISO 22301 is ISO 22301:2019, which replaced the previous 2012 edition. The revised standard introduced a stronger focus on leadership, whilst also making organisational context and risk-based thinking more prominent, while aligning its structure with other modern ISO management system standards.
What is the role of the ISO 22301 Lead Implementer?
An ISO 22301 Lead Implementer is responsible for planning, introducing and maintaining a Business Continuity Management System. This role may be carried out by an internal employee or an external consultant. They oversee the implementation of the standard, coordinate business continuity activities and help prepare the organisation for certification.
How many ISO 22301 clauses are there?
The ISO 22301 framework follows the standard ISO management system structure and contains 10 clauses. Clauses 1 to 3 introduce the standard, while Clauses 4 to 10 set out the auditable ISO 22301 requirements, covering areas such as leadership, planning, support, operation, performance evaluation and continual improvement. For a more detailed breakdown, see our ISO 22301 requirements guide.
How is ‘business continuity’ defined in ISO 22301?
The business continuity definition in ISO 22301 refers to an organisation’s ability to continue delivering products or services at acceptable, predefined levels following a disruptive incident. A Business Continuity Management System helps organisations identify critical activities, assess potential threats and implement measures that reduce the impact of disruption.
What is the difference between ISO 27001 and ISO 22301?
When comparing ISO 22301 vs ISO 27001, the main difference is their focus. ISO 22301 is designed to help organisations maintain business operations during disruption, while ISO 27001 focuses on protecting information through an Information Security Management System. Many organisations choose to implement both standards because business continuity and information security work closely together.
Is the ISO 22301 BCMS compatible with other management systems?
Yes. An ISO 22301 Business Continuity Management System has been developed using the same high-level structure as other ISO management system standards. This makes it straightforward to integrate with standards such as ISO 9001, ISO 14001 and ISO 27001, helping to reduce duplication and simplify management across the organisation.
How long does an ISO 22301 project take?
The time required for ISO 22301 implementation depends on factors such as the size of your organisation, the complexity of your operations and any existing business continuity arrangements. Some organisations can be ready for certification within a few months, while larger or more complex businesses may require longer. Contact ISOQAR to discuss your organisation and receive an estimated project timescale.
How much does ISO 22301 certification cost?
The cost of ISO 22301 certification is based on the size of your organisation, the scope of your Business Continuity Management System and the complexity of your operations. Businesses with multiple locations or more complex activities may require additional audit time. Contact ISOQAR for a quotation based on your organisation’s certification requirements.
How do I apply for ISO 22301 certification?
If you’re ready to apply for ISO 22301 certification, contact ISOQAR to discuss your organisation and your Business Continuity Management System. Our team will explain the certification process, answer any questions and provide a tailored quotation to help you get started.
What can I expect from the ISO 22301 certification process?
The ISO 22301 certification process begins with implementing a Business Continuity Management System that meets the requirements of the standard. An independent certification body will then complete a Stage 1 audit to review your documentation, followed by a Stage 2 audit to assess how your management system operates in practice. Once any findings have been addressed, certification can be awarded and maintained through regular surveillance audits.
Who issues the ISO 22301 certificate?
An ISO 22301 certificate is issued by an independent certification body following a successful certification audit. Choosing a UKAS accredited ISO 22301 certification provider such as ISOQAR provides assurance that your Business Continuity Management System has been independently assessed against internationally recognised standards.
What should I look for in an ISO 22301 certification company?
When comparing ISO 22301 certification companies, choose a provider with UKAS accreditation, experienced auditors and a strong understanding of Business Continuity Management Systems. It’s also worth considering the level of support available throughout the certification process, together with the provider’s reputation for delivering clear guidance and a professional service.
Other ISO 22301 tools
Get a quote for ISO 22301 Certification
Speak to an expert now
Download the full quote form
Download and complete the form yourself to receive your accurate quote.
Not sure where to begin? Speak to our customer service team on 0330 828 2751