> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ISO 22301:2019

> Build organizational resilience with a Business Continuity Management System (BCMS).

> Build organizational resilience with a Business Continuity Management System (BCMS).

ISO 22301 is the international standard for Business Continuity Management Systems (BCMS). It specifies requirements to plan, establish, implement, operate, monitor, and continually improve a management system that protects against, reduces the likelihood of, and ensures recovery from disruptive incidents.

<Note>
  ISO 22301 is certifiable and demonstrates to customers and regulators that your organization can maintain critical operations during disruptions.
</Note>

## Who needs ISO 22301:2019?

<CardGroup cols={2}>
  <Card title="Resilience-focused organizations" icon="shield">
    Any organization that needs to maintain critical operations during disruptions.
  </Card>

  <Card title="Regulated industries" icon="landmark">
    Financial services, healthcare, and infrastructure where continuity is often mandated.
  </Card>
</CardGroup>

## Key components

<CardGroup cols={3}>
  <Card title="Business impact analysis" icon="chart-column">
    Identify critical activities and the impact of their disruption over time.
  </Card>

  <Card title="Risk assessment" icon="triangle-exclamation">
    Assess threats to critical activities and prioritize treatment.
  </Card>

  <Card title="Continuity strategies" icon="sitemap">
    Define strategies and solutions to maintain or recover operations.
  </Card>

  <Card title="Testing and exercises" icon="vial">
    Validate continuity plans through regular exercises and reviews.
  </Card>
</CardGroup>

## How DSALTA helps with ISO 22301:2019

<Steps>
  <Step title="Activate ISO 22301">
    Select ISO 22301 from the Frameworks page. DSALTA maps BCMS requirements to controls.
  </Step>

  <Step title="Conduct a BIA">
    Document your business impact analysis and recovery objectives.
  </Step>

  <Step title="Collect evidence automatically">
    Connect integrations to gather continuity and backup evidence.
  </Step>

  <Step title="Approve continuity plans">
    Review and approve business continuity and disaster recovery plans.
  </Step>

  <Step title="Prepare for audit">
    Share evidence with your certification body.
  </Step>
</Steps>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="How is 22301 different from disaster recovery?" icon="code-compare">
    Disaster recovery focuses on IT restoration. ISO 22301 is broader — it covers the whole organization's ability to continue critical operations.
  </Accordion>

  <Accordion title="Is ISO 22301 certifiable?" icon="certificate">
    Yes. Organizations can achieve third-party certification to ISO 22301.
  </Accordion>
</AccordionGroup>

## Related pages

* [Active Frameworks](/guides/compliance/frameworks-active)
* [Available Frameworks](/guides/compliance/frameworks-available)
* [Controls](/guides/compliance/controls)
* [Audits](/guides/compliance/audits)