BCM health check at a glance: how can ISO 22301 help you?
ISO 22301 Societal security – Business continuity management systems – Requirements, can help organizations prepare themselves to handle disruption of any type. It enables them to continue its operation ranging from natural disasters and cybersecurity-related accidents to small threats that impact business continuity. ISO 22301 provides a framework to plan, establish, implement, operate, monitor, review, maintain and continually improve a business continuity management system (BCMS).
Issue | ISO 22301 impact and action | Benefit to organization |
Business has been disrupted |
See which parties have been affected by your BCMS and what the requirements are. Now plan how and when you will communicate with them when a disruption occurs Define a timescale for you and all third parties when you think activities can be realistically resumed Test the plans you make with all parties concerned in a dry run and not a theory exercise |
Business as usual is possible with a sound plan that is fast Disruptions can become less frequent Sends a strong message to third parties and other links in the supply chain by setting clear expectations A robust BCMS can minimize an organization’s insurance risk and drive down premiums |
Risk management is needed |
Make an evaluation of what the impacts of disruption actually are Consider how you will handle each risk Carrying out frequent and consistent risk assessments on affected parties |
Makes internal and external risks to your business visible Reduced disruptions can mitigate costs Allows you to be abreast of regulatory compliance if disruption occurs Gives you confidence that recovery plans are effective |
Reputation is under threat |
How does your business stand in the wider environment and supply chain? This can help identify threats and disruptions Implement and maintain business continuity plans and keep improving them Test the plans to make sure they are relevant and effective to the organizational need |
Helps build your reputation in the marketplace, winning business Demonstrates that you can deal with change and have organizational resilience Builds stakeholder trust and confidence |
Engagement is suffering |
Business
leaders have to continually develop and improve the BCMS
Make sure the resources are there to improve the BCMS Employees and stakeholders should have a solid understanding of the BCMS policy and how they fit into it |
Helps people to take the BCMS seriously Makes sure employees are competent and reliable when executing the BCP Increases stakeholder and employee engagement and understanding of the BCMS |