Security and resilience — Business continuity management systems
Currently, one of the requirements for doing business is its ability to function sustainably and fulfill its obligations in crisis situations. The introduction of a business continuity management model based on the best practices in this area, laid down in the model of the ISO 22301 standard, will allow the company to ensure this sustainability, and certification – to demonstrate its ability to fulfill obligations for all interested parties.
The ISO 22301 international standard, developed in 2012 on the basis of the BS 25999 standard, is aimed at building a business continuity management system, in particular, minimizing risks and losses from disruptions in the organization’s activity. The standard contains a description of the main elements of the business continuity management system: planning, development, implementation, support, monitoring, analysis and continuous improvement. The recommendations of the standard are designed to facilitate the continuous operation of the company in emergency and difficult situations.
The ISO 22301 standard can be applied by any organization, regardless of the size and type of activity and ownership. However, the implementation of the standard in the field of business continuity management is particularly relevant for organizations operating in high-risk conditions, for example, in manufacturing companies that place their production facilities in different regions, in the public sector, in the field of finance, transport, telecommunications, where the ability to continue its activities is important both for the organization itself, and for its customers and interested parties.
ISO 22301 «Security and resilience — Business continuity management systems — Requirements» became the first standard developed according to the new format for developing ISO standards for management systems. The standard is perfectly combined with ISO 9001, ISO 14001, ISO/IEC 27001 standards.
Benefits of implementation and certification:
- the fastest possible restoration of the normal operation of the company in the event of a force majeure or crisis situation
- preparedness for crisis situations based on reliable and representative risk analysis;
- constant involvement and readiness of personnel to work in force majeure situations;
- building processes based on the best world practices laid down in the standard model;
- increasing the trust in the company from consumers, the state and other interested parties through independent and competent certification;
- increasing the competitiveness of the company by increasing the trust in it from the market.