Topic hub

Governance and standards

Policy, roles, standards, metrics, audit, communications and organizational resilience.

Business continuity basics: what the discipline actually does

Business continuity prepares an organization to continue delivering priority products and services at an acceptable predefined capacity during disruption.

Incident response, crisis management and business continuity are related but different

Organizations work better when each discipline has a clear purpose and handoff rather than one oversized 'emergency plan'.

Crisis and continuity communications

Communications should provide accurate, timely information to the people who need to make decisions, work differently or understand service impacts.

Regulatory, contractual and insurance obligations

Business continuity targets are often influenced by duties outside the continuity team, including contracts, regulation, insurance and customer commitments.

Business continuity policy and governance

A continuity policy gives the program authority, scope, ownership and expectations without turning into a detailed recovery plan.

Continuity roles, ownership and RACI

Clear ownership reduces delays when an activity crosses departments or depends on shared services.

Business continuity metrics that show capability, not paperwork

Good metrics reveal coverage, tested capability, unresolved gaps and program health rather than rewarding the number of documents produced.

Audit and management review in a BCMS

A mature continuity program checks whether its management system is operating as intended and whether leadership decisions are needed.

ISO 22301:2019 and the business continuity management system

ISO 22301:2019 remains the published international requirements standard for a business continuity management system, with a 2024 amendment addressing climate-action changes.

ISO 22313:2020: guidance for applying ISO 22301

ISO 22313:2020 remains the published guidance document for organizations applying the requirements of ISO 22301.

ISO/TS 22317:2021 and business impact analysis

ISO/TS 22317:2021 provides guidelines for establishing, implementing and maintaining a formal BIA process.

Business continuity and organizational resilience

Business continuity is one contributor to broader organizational resilience, alongside risk management, leadership, adaptability, culture and other capabilities.