Both ISO 27001 and ISO 22301 are used for creating and implementing protective strategies in a business environment. However, the difference between them is that ISO 27001 focuses on protecting a business against cyber threats, and ISO 22301 is on ensuring that a business will still operate, regardless of threats, including cyber ones.