ISO 22313 - Guidance on the use of ISO 22301
- Overview
ISO 22320:2020, Security and resilience – Business continuity management systems – Guidance to the use of ISO 22301, is an international standard developed by technical committee ISO/TC 292 Security and resilience. This document provides guidance for applying the requirements for a business continuity management system (BCMS) in accordance with the requirements set out in ISO 22301:2019. ISO 22313 has adopted the new format for writing management system standards described in Annex SL and its structure mirrors that of ISO 22301.
- Approach
Seven Step Consulting Business Continuity Services helps organizations with a comprehensive approach to managing business continuity, using ISO 22313:2020 – Security and Resilience – Business Continuity Management Systems – Guidance On The Use Of ISO 22301. We clarify that this is not a certification standard and organizations can only claim compliance to the best practices which can either be a self-assessment or a third-party independent audit.
- Benefits
Your business benefits from having an
- A detailed description of strategy options for resources
- Assistance with defining your BCMS
- goals for your BCMS
- scope based on cost of mitigation
- Types of resources an organization should establish including the BCMS structure with defined roles and responsibilities
- Elements of assessing the impact in BIA
- Elements to be included in risk assessment
- Suggested strategies for
- Resources/activities
- Backup types
- Worksites
- ICT systems
- Facilities and supplies
- Transportation
- Strategic options for prioritized activities
- What to include in content of
- Business continuity procedures/plans
- Incident communication procedures
- Salvage and security procedures
- Procedures for resuming activities
- Elements of safety and welfare procedures,
- ICT continuity procedures, etc.
- List of resources that may be required for the welfare of employees,
- Competence development program, types of trainings, types of teams, what to include in awareness programs, etc.
- Options to mitigate the impact and duration of an incident
- Content of post-incident review
- suggested objectives for the business continuity exercises
- content of exercise program
- checklist of what evaluation of business continuity procedures should verify
- Evaluation techniques for business continuity capabilities of your key suppliers
- Resources strategies for people, what to take into account for procedures of relocation of staff,
- Explanation on when RTO & RPO is used and for what
- Suggestion of finance needed during an incident, etc.
- Metrics that may be used for measuring the effectiveness of BCMS
- Deliverables
Our experts will work with your team closely to align your organization and comply with the suggested best practice guidance.
Our experienced BCM consultants and/or implementers, will recommend getting both of these standards and develop your management system accordingly, even if certification is not your end goal.
REACH US TO ENSURE THAT WHEN EVEN WHEN A CRISIS STRIKES, YOUR BUSINESS MUST GO ON AS USUAL.