ISO22301 Business Continuity Management System
Market Advantage
The ISO22301 certification is a visible brand credential of your organization’s commitment to business resiliency in the face of disruptions. The world today bears witness to business disruption from natural and manmade disasters. Customers prefer to engage reliable and resilient business partners to overcome disruptions in their supply chain. An independent certification body of your choice will assess and validate that your practices and processes are resilient against disruptions and are aligned to business continuity principles.
Is It For Me?
The ISO22301 is suitable for any size of business, regardless of industry. In a nutshell, natural or manmade disasters cause business disruption. The question is, can you continue your business or risk losing customers?. If you had previous or near episodes of business disruptions, then ISO22301 will provide a preparedness framework for business continuity.
How Much Time?
From ground zero, it typically requires about 6 months from project kick-off to attaining certification. Why 6 months?. 3 months is for management system development work and another 3 months for implementation. Certification bodies require at least 3 months of implementation data. You can compress the time if you develop and implement concurrently. For businesses upgrading their certification to the latest standard, completion time is about 3 months or less.
You may also need to consider other time dependencies such as staff learning curve, hardware, or software (if applicable) implementation.
How We Can Help
We can assist you in achieving certification from start to completion. Our consultancy program is modularized and flexible. Scroll below to read the highlights of the modules. You have the option to choose all the modules or pick the module that you need help with.
General Training Module
Awareness training is suited to give your team members an overview of the management standard. The learning objective is to understand the application of the management standard towards your business context.
Internal Auditing and auditor training is a critical requirement in the management standard. An annual audit of the implemented Management System is required. The internal audit training module is suited for your team of auditors. The learning objective is to understand the methodology of conducting an internal audit, from planning to reporting audit findings.
Technical Training Module
Did your business stop or be disrupted during the pandemic? Were you able to continue your business? These are typical questions that start the discussion of promoting business continuity. Being able to identify and assess business continuity threats and vulnerabilities is essential in ISO22301. The learning objective is to understand, identify and evaluate the types of threats, vulnerabilities, and risks that could disrupt your business. You will also learn about the evaluation methodology to determine your recovery points and continuity strategy.
Some technical knowledge is required to meet essential elements of the standard. Rest assured that there are no complex concepts to grasp or complicated calculations needed.
Risk Inventory Module
Risk management is the cornerstone of the management standards. To a layman, understanding and identifying risk is a complex task. We can help you in this regard by taking over this task. Our risk assessment methodology is aligned with industry codes of practice and is acceptable for certification.
Here is what we will do:
Identify business continuity threats and vulnerabilities.
Identify recovery points.
Evaluate the impacts or consequences of each identified risk.
Creating an inventory highlighting threats, vulnerabilities, risks, and impacts.
Recommend solutions to mitigate significant risks in the Business Continuity Plan.
Policy and Procedure Module
Writing down your policies and procedures ensures continuity of practice. We can assist you in formulating your standard operating procedures (SOP). We conduct peer reviews of your SOPs for suitability and practicality in meeting the standard. We will also guide you during the implementation of your SOPs for fulfilling certification requirements.
Pre-Certification
Assessment Module
At the end of the implementation period, we will assess your readiness for the actual certification exercise. We will report and highlight areas for closure and improvements to be made before fixing a date with your appointed certification body.
Post-Certification Module
Our service does not end when your organization is certified. Maintaining the certified system through annual internal audits is mandatory over the three years of certification. If you are short on human resources or skillset, we provide contract internal audit services to help you maintain your certification.
To know more, click here.
