The market is always subject to fluctuations, which have major impacts (both positive and negative) on the development and survival of an economic organization. To limit risks and ensure that operations are maintained effectively without disruption, enterprises and organizations should implement a Business Continuity Management System as a tool and strategic orientation plan when facing unexpected emergencies.

ISO 22301:2019 – the Business Continuity Management System (BCMS) standard, first published by the International Organization for Standardization on May 15, 2012, provides a framework and principles to help organizations prevent, respond to, and recover from incidents in order to maintain continuous business operations.

Contents of ISO 22301 Standard

The standard content includes several sections:

• Scope: Clearly defines the scope of BCMS implementation, including activities, processes, and departments within the organization.
• Normative references: Lists related reference documents upon which ISO 22301 is based.
• Terms and definitions: Defines important terminology within the context of ISO 22301 to help understand requirements and clauses relevant to the organization’s operational scope.
• Context of the organization: Requires organizations to determine and review internal and external factors affecting BCMS.
• Leadership: Provides guidance on leadership roles and commitment to BCMS, including resource sponsorship (human resources, time, and cost).
• Planning: Requires organizations to identify risks and opportunities and set BCMS objectives, along with planning and risk treatment processes.
• Support: Specifies requirements for resources, competence, training, periodic information, and improvement management to support BCMS.
• Operation: Regulates BCMS implementation and execution, including coordination processes, personnel management, incident response and recovery, and change management processes.
• Performance evaluation: Requires organizations to assess and measure the effectiveness and performance of BCMS, as well as address nonconformities and implement continual improvement.
• Improvement: Requires improvement of BCMS based on performance evaluation results, including incident handling, objective setting, and improvement actions.

Benefits of implementing a Business Continuity Management System

• Enhances business development by establishing necessary contingency plans for incidents, enabling rapid recovery and ensuring uninterrupted business operations.
• Improves reputation and brand image of products, services, and enterprises in the eyes of customers, demonstrating the application of international standards.
• Ensures compliance with legal requirements related to business safety management, helping organizations avoid potential legal issues and consequences.
• ISO 22301 can be implemented by all organizations regardless of size, type of operation, or years of operation, particularly when there is a need to maintain continuous and effective business activities while minimizing risks from natural disasters, economic downturns, and unexpected situations.

However, the Business Continuity Management System contains many specialized aspects that require guidance and assessment from experienced professional organizations. Therefore, enterprises should cooperate with reputable certification bodies with designated competence to achieve the best results.

“ISSQ Quality Institute – Quality Creates Class” continuously strives to deliver value and earn greater customer trust. The certification process for Business Continuity Management Systems at ISSQ Quality Institute includes the following steps:

Step 1: Receive certification application documents

Step 2: Sign a scientific and technological service contract

Step 3: Conduct on-site surveys and assessments at the enterprise

Step 4: Complete documentation after assessment

Step 5: Appraise documents and issue certification (if compliant)

Step 6: Conduct surveillance assessments once every 12 months

Step 7: Conduct recertification assessment (certificate validity: 3 years)

We hope this article has provided useful and necessary information for readers.

ISSQ Quality Institute is always ready to accompany companies during integration and development.

Please contact hotline: +84 981851111 or email vienchatluong@issq.org.vn | tcvn@issq.org.vn. We are honored to serve our valued customers.

Publication date: 13/09/2023