ISO 22301:2019 Certification

As an ISO 22301 Certified Senior Lead Implementer with over 20 years of experience in the industry, 4R is strategically positioned to assist companies of all sizes to achieve certification. The Standard can be purchased here.

ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements.

ISO 22301:2019 is made up of 10 clauses: 3 passive and 7 active. The active clauses are considered requirements that the Management System (MS) MUST conform to in order to successfully obtain certification.

If you are just starting out; here are some of the basics you need to know about the development and implementation of a BCMS:

  • Scope is key!

    • Which divisions or departments make up the initial scope?

    • How many physical sites?

    • Full time work from home staff?

    • Can Excel & Word templates be used?

    • Is the scope large enough to require the utilization of a BCM Tool?

  • Management Support through the creation of a BCMS Steering Committee will ensure strategic, standardized implementation

  • Strategical and tactical plan, working backwards from your goal.

  • General Employee Awareness

    • Email Campaigns

    • Webinars

    • Posters

  • BCM Staff training and preferably BCM certification

    • Workshops

    • Webinars

    • 3rd Party Vendor training

    • ISO Lead Implementer Certification

  • Emergency Management

    • Work closely with Facilities Management, Safety & Security to ensure the creation of a standardized Emergency Response Planning program across all sites to support staff safety - which is paramount!

  • Crisis Management

    • Standardized global corporate approach for the response to and management of an event with potential or realized impact in multiple countries, regions or global.

  • Crisis Communication

    • Effective communication to staff and designated BCM response and/ or recovery teams in a timely manner

  • BCM Assessments & Plans

    • Business Impact Analysis

    • Risk Assessments

    • Business Contingency/ Recovery Plans

  • BCMS Testing & Exercise

    • Test your Plan & Exercise your Team

  • BCMS Effectiveness Evaluation

    • Metrics

    • KPIs

    • KRIs

  • Continual Improvement!

If you have a BCMS and need to determine your Certification Readiness

  • Competence is Key!

    • Hire a third party, fully certified consultant (ISO 22301 Lead Implementer or higher) to conduct the readiness review

  • Gap Assessment

    • Consultant MUST conduct a comprehensive assessment between your BCMS and the ISO 22301:2019 Clause requirements

  • Gap Remediation

    • Remediate all identified gaps

    • Develop timeline for completion & re-assessment

  • Internal Audit

    • Develop & disseminate RFP to a number of select firms

    • Select internal auditor and set up IA schedule

    • Conduct Internal Audit

    • Remediate any non-conformities identified by the Internal Auditor

  • External Certification Audit

    • Develop & disseminate RFP to a number of select firms

    • Select auditor and set up Certification Audit schedule

      • Conduct Pre-Assessment

      • Stage 1 Audit

      • Stage 2 Audit

    • Conduct Mock Audits with BCMS Staff in scope for the Certification

    • Successfully pass Certification Audit!


Complete the form below to schedule a 30 minute free consultation on what 4R can do for you!