ISO 22301:2019 Certification

As an ISO 22301 Certified Senior Lead Implementer with over 20 years of experience in the industry, 4R is strategically positioned to assist companies of all sizes to achieve certification. The Standard can be purchased here.

ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements.

ISO 22301 is made up of 10 clauses: 3 passive and 7 active. The active clauses are considered requirements that the Management System (MS) MUST conform to in order to successfully obtain certification.

If you are just starting out; here are some of the basics you need to know about the development and implementation of a BCMS:

  • Scope is key!

    • Which divisions or departments make up the initial scope?

    • How many physical sites?

    • Full time work from home staff?

    • Can Excel & Word templates be used?

    • Is the scope large enough to require the utilization of a BCM Tool?

  • Management Support through the creation of a BCMS Steering Committee will ensure strategic, standardized implementation

  • Strategical and tactical plan, working backwards from your goal.

  • General Employee Awareness

    • Email Campaigns

    • Webinars

    • Posters

  • BCM Staff training and preferably BCM certification

    • Workshops

    • Webinars

    • 3rd Party Vendor training - Certification ONLY

  • Emergency Management

  • Work closely with Facilities Management, Safety & Security to ensure the creation of a standardized Emergency Response Planning program across all sites to support staff safety - which is paramount!

  • Crisis Management

    • Standardized global corporate approach for the response to and management of an event with potential or realized impact in multiple countries, regions or global.

  • Crisis Communication

    • Effective communication to staff and designated BCMS response and/ or recovery teams in a timely manner

  • BCM Assessments & Plans

    • Business Impact Analysis

    • Risk Assessments

    • Business Contingency/ Recovery Plans

  • BCMS effectiveness evaluation

    • Metrics!

  • Continual Improvement Planning!

If you have a BCMS and need to determine your Certification Readiness

  • Competence is Key!

    • Hire a third party, fully certified consultant (ISO 22301 Lead Implementer or higher) to conduct the readiness review

  • Gap Assessment

    • Consultant MUST conduct a comprehensive assessment between your BCMS and the ISO 22301 Clause requirements

  • Gap Remediation

    • Remediate all identified gaps

    • Develop timeline for completion & re-assessment

  • Internal Audit

    • Develop & disseminate RFP for a number of select firms

    • Select auditor and set up IA schedule

  • External Certification Audit

    • Develop & disseminate RFP for a number of select firms

    • Select auditor and set up Certification Audit schedule

      • Stage 1 Audit

      • Stage 2 Audit

    • Conduct Mock Audits with BCMS Staff in scope for the Certification

    • Successfully pass Certification Audit!

Complete the form below to schedule a 30 minute free consultation on what 4R can do for you!