ISO 22301 Procedures & Plans
Ready-to-use business continuity procedures and plans that define how your organisation prepares for, responds to, and recovers from disruptive incidents.
Why Do You Need BCMS Procedures?
ISO 22301 requires documented procedures that enable your organisation to manage disruptions effectively. Clear procedures ensure that staff respond consistently during a crisis, that recovery activities follow a tested sequence, and that auditors can verify your BCMS operates as intended.
What's Included
- Crisis management procedure with activation triggers, command structure, and decision-making authority
- Business continuity planning procedure covering plan development, maintenance, and distribution
- Disaster recovery procedure for IT systems including RTOs, RPOs, and failover steps
- Communication procedure defining internal notifications, external stakeholder updates, and media handling
- Exercise and testing procedure with scenario design, facilitation guidance, and post-exercise reporting
- Procedure document template with standard formatting and revision control
How to Use These Procedures
- Review each procedure — understand the structure, triggers, and decision points
- Customise for your organisation — adjust roles, contact details, and recovery sequences
- Align with your BIA results — ensure recovery priorities match your business impact analysis
- Train and exercise — conduct drills so staff are confident using the procedures under pressure
- Update after every incident or exercise — incorporate lessons learned to keep procedures current