ISO 22301
Business continuity planning that keeps critical operations running.
ISO 22301 asks a question most organisations only confront after a crisis has already hit: which operations are critical, how long can they be down before real damage happens, and what's the actual plan to keep them running or recover them fast? The standard requires a documented business-impact analysis, tested recovery procedures, and a defined chain of responsibility for when disruption strikes — whether that's a natural disaster, a cyber incident, a supply-chain failure, or the loss of a key site. Certification demonstrates that continuity planning has been tested under realistic conditions, not just written down and filed away.
How It Works
Tell us about your organisation and its scope — we review fit against the standard and respond with a clear, itemised quotation.
A documentation and readiness review confirming your management system is designed to meet the standard before any on-site assessment begins.
An on-site (or remote, where permitted) assessment of how the system actually operates in practice, checked against every applicable clause.
A reviewer who was not part of the audit team evaluates the findings and makes the certification decision — the impartiality safeguard behind every certificate we issue.
Your certificate is issued with a QR code for instant online verification, valid for three years subject to annual surveillance audits.
Indicative, not exhaustive — your auditor confirms the exact list for your scope during Stage 1.
A ISO 22301:2019 certificate is valid for three years from the date of issue, subject to annual surveillance audits that confirm the management system is still being maintained — not a one-time snapshot. Recertification before the three-year expiry keeps the certificate (and the QR-code verification behind it) current.