PN-EN ISO 22301

ISO 22301, is the recognised international standard for Business Continuity Management Systems (BCMS), published by the International Organisation for Standardization (ISO).

This document specifies the requirements for implementing, maintaining and improving a management system to protect against, reduce the likelihood of, prepare for, respond to, and recover from disruptions when they occur.

The ISO 22301 Business Continuity Management standard significantly helps organizations to identify and prioritize threats, and develop effective business continuity plans. It allows them to effectively implement a business continuity management system, thanks to which they are ready to respond to incidents and restore the efficiency of the organization with the least disruption to its operations.

The introduction of the Business Continuity Management System according to ISO 22301 brings measurable benefits to the organization, including:

• meeting the requirements of contractors,
• identifying current and potential threats to the company and assessing the risk associated with them,
• implementation of mechanisms preventing or limiting the possibility of crisis situations,
• a proactive approach to minimizing the impact of incidents on the organization’s operations.
• ensuring efficient operation of critical functions in the organization in crisis situations,
• minimizing downtime during incidents and shortening recovery time,
• reduction of costs related to the occurrence of crisis situations,
• protecting the company’s reputation and increasing the sense of security of stakeholders,
• increase in social trust in the organization,
• ensuring a competitive advantage.

The requirements set out in ISO 22301 are general and apply to all organizations or parts thereof, regardless of the type, size and nature of the organization. The scope of application of these requirements depends on the organization’s operating environment and complexity.

The ISO 22301 standard applies to organizations that:

1. a) want to implement, maintain and improve the BCMS;
2. b) strive to ensure compliance with the established business continuity policy;
3. c) must be able to deliver products and services with acceptable, predetermined performance in a crisis situation;

(d) seek to increase their crisis resilience through the effective use of the BCMS.

The ISO 22301 standard can be used to assess an organization’s ability to meet its own business continuity needs and commitments.