Skip to main content
Build organizational resilience with a Business Continuity Management System (BCMS).
ISO 22301 is the international standard for Business Continuity Management Systems (BCMS). It specifies requirements to plan, establish, implement, operate, monitor, and continually improve a management system that protects against, reduces the likelihood of, and ensures recovery from disruptive incidents.
ISO 22301 is certifiable and demonstrates to customers and regulators that your organization can maintain critical operations during disruptions.

​
Who needs ISO 22301:2019?

Resilience-focused organizations

Any organization that needs to maintain critical operations during disruptions.

Regulated industries

Financial services, healthcare, and infrastructure where continuity is often mandated.

​
Key components

Business impact analysis

Identify critical activities and the impact of their disruption over time.

Risk assessment

Assess threats to critical activities and prioritize treatment.

Continuity strategies

Define strategies and solutions to maintain or recover operations.

Testing and exercises

Validate continuity plans through regular exercises and reviews.

​
How DSALTA helps with ISO 22301:2019

1

Activate ISO 22301

Select ISO 22301 from the Frameworks page. DSALTA maps BCMS requirements to controls.
2

Conduct a BIA

Document your business impact analysis and recovery objectives.
3

Collect evidence automatically

Connect integrations to gather continuity and backup evidence.
4

Approve continuity plans

Review and approve business continuity and disaster recovery plans.
5

Prepare for audit

Share evidence with your certification body.

​
Frequently asked questions

Disaster recovery focuses on IT restoration. ISO 22301 is broader — it covers the whole organization’s ability to continue critical operations.
Yes. Organizations can achieve third-party certification to ISO 22301.