ISO 22301 Business Continuity Management Systems

Acts of nature beyond control and unforeseen events – also in distant production and procurement countries – can cause serious damage to companies and other organisations. Against the background of globalisation and internationalisation, uncontrollable influences such as natural catastrophes, political disturbances or the failure of IT systems often have far-reaching consequences. This is where a Business Continuity Management system (BCM) can help by ensuring preventive measures are in place: with the help of previously-defined plans, companies can overcome crisis scenarios and ensure the continuity of their business.

Within all sectors, business processes are becoming more vulnerable to disturbances, both in SMEs and in large enterprises. The major reason is the increasing use of computer-based operating procedures; on the other hand, outsourcing, outtasking and integration into international partnership networks mean that even crises in far-distant countries can have a considerable effect on the situation at home. A BCM can establish an emergency plan for such cases and offers the chance to maintain business operations even in exceptional circumstances, or to be able to reinstate them as rapidly as possible following an interruption. This means that financial and intangible damage can be limited, and disruptions which could threaten the very existence of the enterprise can be avoided.

With the certification of a BCM system, organisations receive an independent and qualified assessment of the effectiveness and reliability of their BCM system. The certification is based on the international norm ISO 22301, the follow-up of the British Standard BS 25999-2. In addition to the security enjoyed by the certified organisation itself, certification has a positive effect on customers and business partners - for it shows that the company will remain functional even if serious events should occur, and that it is a reliable supplier or outsourcer, especially for critical areas of business.

The certificate which is issued following a successful audit is valid for three years. Annual surveillance audits confirm that the criteria of the standard continue to be fulfilled.