How would your organisation continue operating in the event of a crisis? If you were hit by a cyber attack and lost the use of your IT systems, would you be able to carry on? If your business premises were forced to close, what would you do? If you were affected by unexpected staff absence, how could you reassure your customers that you could still offer them the service they expected?

If your organization is affected by any of these issues and you’re unprepared, then the financial and reputational damage you face could prove disastrous. You could fail to keep up with customer demand and lose important business, and your customers could go elsewhere. Without a proper risk assessment strategy, your company directors could even face prosecution if a major incident occurs and results in loss or injury.

An introduction to ISO22301

To minimize the impact of a disaster on your business, and to continue to provide essential services to your customers, you need to put in place a business continuity management system (BCMS).

ISO22301: A Pocket Guide is designed to help you satisfy the requirements of ISO22301, the latest international standard for business continuity management (BCM). A BCMS based on ISO22301 will protect your organization’s turnover, profits, and reputation. With the expert advice contained in this guide, you can ensure your organization develops a business continuity plan that is fit for purpose and ensure your continuing service when disaster strikes.

Learn how to build your business continuity management system (BCMS).

• Plan and manage a BCMS. If you are going to have a proper BCMS you will need to make business continuity a formal project. This pocket guide gives you valuable tips on how to draw up the BCM policy and establish the BCMS project, along with basic guidance on conducting a business impact analysis.
• Secure your license to operate. Organizations such as law firms now have to put in place a BCMS in order to obtain a license to operate.
• Retain your competitive edge. Organisations are beginning to seek formal assurance that their suppliers will be able to continue supplying them in the event of an interruptive incident. If you are a supplier, having a BCMS certified to ISO22301 represents a significant competitive advantage.
• Satisfy corporate governance concerns. A well-run company will have a strong corporate governance framework. Business continuity planning is a basic requirement of corporate governance.

Expert ISO22301 guidance

About the author
Tony Drewitt has specialised in operational risk management and business continuity management since 2001, and he works with small, medium and large organizations to help them develop their BCM policies, strategies, and plans. Tony was one of the first practitioners to achieve certification under BS25999 (for a client in 2008).