{"id":13101,"date":"2019-09-15T16:23:38","date_gmt":"2019-09-15T14:23:38","guid":{"rendered":"https:\/\/www.nem2015.com\/news\/iso-22301\/"},"modified":"2024-12-20T10:21:08","modified_gmt":"2024-12-20T09:21:08","slug":"iso-22301","status":"publish","type":"post","link":"https:\/\/www.nem2015.com\/en\/standard-en\/iso-22301\/","title":{"rendered":"ISO 22301"},"content":{"rendered":"

ISO 22301<\/strong> is the standard which defines the requirements for a Business Continuity Management System (BCMS)<\/strong> in order to guarantee the Organization\u2019s ability to protect itself against destructive events<\/strong> that can directly or indirectly affect it and to recover its operations<\/strong> in an organized way, with the goal to protect its own Customers<\/strong>.<\/p>\n

The requirements specified by the standard can be applied to the whole Organization or a part of it<\/strong>, regardless of the nature, type and size of the Organization itself. The degree of application of the requirements of ISO 22301<\/strong> standard depends on the environment<\/strong> in which the organization operates and on its complexity<\/strong>.<\/p>\n

The Business Continuity Management System<\/strong> must take into consideration the legal requirements, the reference standards, the products and services provided by the Organization, its processes and the requirements of the Interested Parties, first of all the Customers<\/strong>.<\/p>\n

\n

Respond and restore operations to a predefined level after a destructive event and guarantee the supply continuity to the Customers.<\/h3>\n<\/blockquote>\n

The Business Continuity Plan<\/strong> has to provide information and procedures to guide an organization to react to an incident and restore operations at a predefined level after a disruptive event<\/strong> and guarantee the supply continuity to its Customers<\/strong>. The Plan has to provide with actions to be executed after an emergency<\/strong> such as, for example, a natural disaster<\/strong> (earthquake or flooding), a terrorist attack<\/strong>, a long-lasting power outage<\/strong> or default of a critical supplier<\/strong>. The plan has to allow the organization to overcome an emergency<\/strong> while safeguarding its ability to meet the needs of its customers and stakeholders, minimizing the damage from a management point of view.<\/p>\n

The Business Continuity Management System<\/strong> must be able to minimize the consequences caused by an incident<\/strong>, which can have impact on:<\/p>\n