E
2301 is the new international
rd for business continuity
gement.
cial title is ISO 22301 Societal
ty - Business Continuity Management
m - Requirements.
2301 is an ISO requirements
rd, which effectively means it is an
ble specification.
one of the pioneers of the
BCM best practice standard,
-2:2007 and this has now been
d by ISO 22301, due to the
ernational interest in the origi-h standard BS 25999-2 and other
tandards. Since its introduction
BS 25999-2 has grown in accep-ldwide. BS 25999 sold in over
ries, with certificates in 43 coun-ertificate applications in another
es. 800 sites are already certified
one with 400 pending (these will
sition to ISO 22301).
999 was created to set out a uni-chmark in good practice, sate needs of customers, clients,
nt, regulators and all other
parties. BS 25999 has formed
of many other BCM standards,
the US ASIS/BSI BCM.01 stan-pted by ANSI. BS 25999 and
M standards from across the
vided the source material for
on of the new international stan-O 22301 (requirements) and ISO
idance).
BS 25999-2, ISO 22301 is an
nal standard, which will see
ernational acceptance. For those
o or aligned with BS 25999-2,
onal requirements easy to under-adjust to.
the latter part of 2012 or early
SO will issue a guidance docu-
O 22313. This document will
orm of good practice guidance
mmendations, indicating what
an organization should, or may,
to implement effective BCM.
ions may choose to follow all or
e guidance, which may be used
for self-assessment or between organiza-
tions. The guidance is not a specification
for BCM.
Improvements and comparison of
ISO 22301:2012 to BS 25999-2:2007
– Critical aspects you should know
In comparing ISO 22301 with BS
25999-2 you will see that it includes all
the core requirements of 25999-2.
u The “Plan Do Check Act” cycle
u Business continuity policy
u Business impact analysis
u Risk assessment and risk treatments
u Exercising
u Business continuity plans and strategy
u Internal audit
u Management review
u Non conformity and corrective action
u Improvement actions