Standard
ISO 27031 maturity assessment
ICT readiness for business continuity
- ISO 27031:2025
- 56 questions
- 6 categories
- Maps to: IT disaster recovery, Business continuity, Information security
What the standard requires
ISO 27031 describes how information and communication technology supports business continuity: ICT readiness, the recovery capabilities that back the organization’s continuity requirements, and the link between IT disaster recovery and the wider program.
How ResiliencyPulse scores it
The ISO 27031 model has 56 questions in 6 categories covering ICT continuity governance, requirements alignment with the business, strategy and design, implementation, testing and exercising, and improvement. Scores roll up to the IT disaster recovery domain. It is the fastest full model to complete and a good second assessment after ISO 22301.
Who assesses against it
IT and technology resilience leaders, and continuity leaders who need to show that recovery capability matches the business impact analysis rather than assuming it does.
Questions
Do I need to be certified or regulated to use this model?
No. The model measures maturity against the standard’s structure. Certification and examination are separate processes this assessment does not replace.
Can I run this model alongside others?
Yes. Pro includes three models and Scale is unlimited. Results from every model roll up to the same eight resilience domains.