Standard
ISO 22301 maturity assessment
Business continuity management systems
- ISO 22301:2019
- 105 questions
- 13 categories
- Maps to: Business continuity, Risk management, Third-party risk and resilience
What the standard requires
ISO 22301 is the international standard for business continuity management systems. It sets out what an organization must have in place to understand its priorities, protect them, and recover when something goes wrong: leadership commitment, a business impact analysis and risk assessment, continuity strategies, documented plans, exercising, and a cycle of review and improvement.
How ResiliencyPulse scores it
The ISO 22301 model in ResiliencyPulse has 105 questions in 13 categories that follow the structure of the standard, from context and leadership through planning, support, operation, performance evaluation, and improvement. Each question is scored 0 to 5 against plain-language descriptions of what that maturity level looks like in practice, and category scores roll up to the business continuity, risk management, and third-party domains.
Who assesses against it
Any organization building or maintaining a business continuity program, whether or not it intends to certify. It is the most common starting point for a first assessment and the model used in most engagements of Bryghtpath’s Resiliency Diagnosis®.
Questions
Do I need to be certified or regulated to use this model?
No. The model measures maturity against the standard’s structure. Certification and examination are separate processes this assessment does not replace.
Can I run this model alongside others?
Yes. Pro includes three models and Scale is unlimited. Results from every model roll up to the same eight resilience domains.