We spend over 1 million hours each year improving the performance ofbusinesses around the world
This experience allows us to see first-hand how ISO 22301 can help organizations to reduce risks, increase resilience,and deliver real benefits

Business issue

How ISO 22301 helps• You need to consider the interesed parties affected by the BusinessContinuity Management System (BCMS) and their requirements and plan
how and when you will communicate with them when an incident occurs

Disruption• You need to define acceptable timescales for the resumption of activities foryou and your suppliers

Benefit to your organization• Reduces the frequency and impact of disruptions• Helps you to return to “business as usual” as swiftly as possible• Sets clear expectations and improves supply chain relationships• A robust BCMS in place could reduce your insurance premiums• It requires you to test your plans and work with partners, making it real andnot just a paper-based exercise• You need to understand your role in the wider environment and supply chain
so you can identify and effectively manage potential disruptions

Reputation• You need to implement, maintain and improve business continuity plans• You need to regularly test plans to check they are effective• Enhances your reputation in the market place which could help youwin business• Helps ensure your plans are robust and ensures you are resilient
and well-placed to deal with change• Builds stakeholder confidence and trust

Risk
management• You will need to evaluate the impact of disruption• You need to consider how each risk will be handled• You need to carry out regular risk assessments, including those affecting
interested parties and the wider community• Gives visibility on the risks to your organization both internally andexternally• Gives you confidence that your recovery plans are effective• Can give cost savings on reducing the impact of disruptions• Keeps you up-to-date with any regulatory obligations or societal
needs in the event of a disruption

Engagement• Top management are required to develop and continually improve the BCMS
• Resources and training must be made available to deliver the BCMS
• Employees and stakeholders must understand the BCMS policy and theirroles and responsibilities in relation to it• It puts a high emphasis on the importance of the BCMS so it’staken seriously• Ensures staff are competent to effectively manage the BCMS
• Gives greater clarity to stakeholders and increases employee
engagement and understanding of the BCMS

Top tips on making ISO 22301 effective for you
Every year we have interactions with tens of thousands of clients. Here are their top tips.
Top management commitment is key to making this a success.

“The earlier that organizations talk to senior managers, the better itwill go for them so have those discussions early”.
John Scott, Overbury, leading UK fit-out and refurbishment business

Keep staff informed of what’s going on, create a team or assign achampion, as this will increase motivation. This could include a wellcommunicated plan of activities and timescales.

“When we decided to implement the new standard, we assigned aninternal champion of the standard inside the organization”.

Think about how different departments work together to avoidsilos. Make sure the organization works as a team for the benefit ofcustomers and the organization.

“With ISO 22301 in place, we are all talking the same language about
the business. We all understand what is meant by best practices and weare better able to deliver on our customers’ expectations even during animpactful business event”.

Ronald Tse, Ribose, Hong Kong based cloud services provider

Dan Nickel, Ciena, US based network solutions provider

Review systems, policies, procedures and processes you have inplace – you may already do much of what’s in the standard, andmake it work for your business.
Speak to your customers and suppliers.
They may be able to suggest improvements and give feedback on
your service.

“The BCM system is a great reassurance. It has enabled us to make plans tomitigate problems quickly if they occur– for example, to identify a second
water supply and provide electricity back-up – things we wouldn’t have doneotherwise”. Andy Drummond, Lettergold Plastics Ltd, UK engineering company“They [customers] know we have a solid framework for service
continuity and ability to restore all services to business as usual
operation in the least possible time”.
Sanjay Verma, Dunn & Bradstreet (Australia), global business information provider

Jide Orimolade, AIICO Insurance, Nigerian life insurance provider

Find out more
Call: +44 (0)345 080 9000
Visit: bsigroup.com

BSI/UK/853/SC/0516/EN/BLD

And finally, when you gain certification celebrate yourachievement and use the BSI Assurance Mark on yourliterature, website and promotional material.

“Staff awareness training was vital to the success of ISO 22301
implementation project”.

© BSI Group

Train your staff to carry our internal audits of the system. This can help
with their understanding, but it could also provide valuable feedback on
potential problems or opportunities for achievement.