ISO 22301
Build a business continuity management system that keeps critical services running through disruption.
ISO 22301: what it is and why it matters
ISO 22301 specifies requirements to plan, establish, implement, operate, monitor, review, maintain and continually improve a management system that protects against, reduces the likelihood of, and helps an organisation respond to and recover from disruptive incidents.
Its working core is practical: understand which products and services matter, how long you can afford to be without them, and what you will do when something fails. It then asks you to prove those arrangements by exercising them.
Built for the people who carry the work
- Business continuity, resilience and operational risk managers
- IT service continuity and disaster recovery leads
- Internal auditors and consultants who assess continuity arrangements
- Executives who own critical services and recovery decisions
What you will be able to do
- Explain how a business continuity management system is structured and governed
- Carry out a business impact analysis and relate it to risk assessment
- Select continuity strategies and solutions for critical activities
- Develop and maintain continuity plans and procedures
- Plan exercises and review their results for improvement
Subject outline
- 01
Context, scope and leadership
- 02
Business impact analysis and risk assessment
- 03
Continuity strategies and solutions
- 04
Business continuity plans and procedures
- 05
Exercising and testing
- 06
Performance evaluation and internal audit
- 07
Management review and improvement
How it supports real work
Linking recovery time targets to named services and owners
Turning a plan that has never been tested into an exercise with findings
Aligning continuity, incident response and IT recovery plans
Training, examination and certification are different steps
ISO 22301 is certifiable at organisation level. Training builds knowledge. Organisational certification is awarded after an audit by a certification body.
- Training does not certify your organisation.
- Organisational certification comes from a certification body audit.
- Personal credentials depend on the issuing body and normally need an exam. We confirm the route with you before you enrol.
What is confirmed, and what people ask
Delivery information
Delivery details for this course have not been confirmed for publication, so none are listed here. Course length, schedule, language, delivery format and fees are confirmed per enquiry. Certification bodies set their own exam and eligibility rules, and we confirm the route to any certificate before you enrol.
Enquire About This CourseFrequently asked questions
What is the difference between business continuity and disaster recovery?
Business continuity covers keeping critical services running across the whole organisation. Disaster recovery is usually the technology part of that, restoring systems and data.
Why are exercises emphasised?
A plan that has not been tested is an assumption. The standard asks you to exercise arrangements and act on what you learn.
Can ISO 22301 be combined with ISO/IEC 27001?
Yes. They share a management system structure, which lets organisations run them together.
Does the course certify my organisation?
No. Organisational certification comes from an audit by a certification body.
Related courses
Related Valtrenix services
Request course information
Tell us who the training is for and what you want to achieve. We reply with confirmed details only, including what is currently available for ISO 22301.
- Individual and team training enquiries welcome
- No fees, dates or formats are published until confirmed
- We confirm the certification route before you enrol