ISO 22301:2019
Security and resilience — Business continuity management systems — Requirements
The world's leading standard for business continuity management. ISO 22301:2019 helps organisations prepare for, respond to, and recover from disruptive events — protecting operations, reputation, and revenue. It pairs well with ISO 22361 crisis management for complete resilience.
Why Certify
Benefits of ISO 22301:2019 Certification
ISO 22301:2019 turns business continuity planning into a documented, tested capability and a demonstrable commitment to resilience.
Organisational Resilience
Build the capability to anticipate, prepare for, respond to, and recover from disruptive incidents.
Stakeholder Confidence
Demonstrate to clients, investors, and partners that your organisation can maintain critical functions under pressure.
Meet Contractual Requirements
Many enterprise clients and government contracts ask for business continuity certification at supplier qualification — each buyer sets its own criteria.
Reduce Downtime Costs
Structured recovery plans and tested procedures minimise the financial and operational impact of disruptions.
Protect Critical Resources
Identify and prioritise your most critical activities, staff, and assets to ensure continuity during any incident.
Regulatory Compliance
Supports sector-specific expectations for business continuity in finance, healthcare, and critical infrastructure.
What It Covers
Key Requirements of ISO 22301:2019
ISO 22301:2019 follows the High Level Structure (HLS), making it compatible with ISO 9001:2015, ISO 14001:2026, ISO 45001:2018, and ISO/IEC 27001:2022 for integrated management systems.
Industries
Who Needs ISO 22301:2019?
ISO 22301:2019 is most relevant to organisations where operational downtime has significant financial or regulatory consequences, including:
Simple & Clear
Our ISO 22301:2019 Certification Process
From Business Impact Analysis to certification — a clear, structured journey tailored to your organisation.
Application
Submit your application to initiate the certification process.
Certification Agreement
A formal agreement will be shared for your review and signature prior to commencement.
Stage 1 Audit
A thorough review of your documentation, processes, and overall readiness against the applicable standard.
Stage 1 Audit Report
A detailed report outlining findings, observations, and recommended actions will be shared with you.
Stage 2 Audit
An on-site or remote assessment evaluating the implementation, effectiveness, and conformity of your management system.
Final Report & Certification
Upon completion of the Stage 2 audit, a comprehensive report will be issued. Any identified nonconformities must be addressed before certification is formally granted.
Detailed Guide
Everything You Need to Know
What is ISO 22301:2019?
ISO 22301:2019 is the international standard for a Business Continuity Management System (BCMS). It sets out how an organisation prepares for disruption, whether from an unexpected incident or a wider disaster. Disruption is what causes the damage that follows: lost revenue, data unavailable when it is needed, and services that fall short of agreed service levels. A certified BCMS gives an organisation a documented, tested way to keep operating through those events.
The BCM standard is designed to ensure that a robust business continuity management system has been established, and that internal staff members are fully aware of their role within the system should an incident occur.
ISO 22301:2019 — Security and resilience — Business continuity management systems — Requirements
ISO 22301:2019 demonstrates that an organisation has a structured approach to maintaining operations during disruptions, incidents, or unexpected events. It confirms the organisation’s ability to deliver uninterrupted services and manage risks that could impact system availability.
One example: eInvoicing service providers rely on continuity to keep invoice exchange and reporting running, which is what buyers in that sector look for.
Apply for ISO 22301:2019 certification with UCS
Benefits of ISO 22301:2019
- Critical activities identified, with recovery times agreed in advance
- Flexibility to keep operating through an interruption
- Evidence of resilience that customers and buyers can check
- Continual improvement driven by internal audits
- A structured basis for meeting regulatory expectations on continuity
- Lower cost of disruption when an incident does happen
- Agreed service levels maintained during an incident
- Clearer roles and accountability across management
- Reputation protected through a planned, practised response
For the standard itself, see the International Organization for Standardization.
Read our ISO certification process to see how certification runs, step by step.
Often Certified Together
Related Certifications
Many businesses pair this standard with one of the certifications below.
Ready to Get ISO 22301:2019 Certification?
Contact our team today for a free assessment and tailored quote. Most eligible businesses can achieve certification within 7–10 days.