ISO 22301 and ISO 27001 have significant alignment, the largest being that they both follow Annex A structure. While there are some deviations in each of the individual standards, there is considerable overlap in clause requirements​. As a result, organisations looking at multiple standards may not have to implement multiple times. They also both require a risk-based prioritisation of products, services and activities​, though ISO 27001 is more limited in scope and specifically focuses on the management of information in continuity scenarios​.