Overview
EN ISO 22313:2020 - Security and resilience - Business continuity management systems - Guidance on the use of ISO 22301 - provides practical guidance and recommendations for implementing the requirements of ISO 22301. Based on good international practice, this guidance supports organizations that implement, maintain and improve a Business Continuity Management System (BCMS) to ensure continuity of products and services at a predefined capacity during disruptions and to enhance organizational resilience.
Key topics and technical focus
The guidance follows the BCMS lifecycle and expands on ISO 22301 requirements. Major technical topics include:
- Context of the organization: understanding internal/external factors and interested parties to determine BCMS scope.
- Leadership and policy: top-management commitment, roles, responsibilities and communication of business continuity policy.
- Planning: actions to address risks and opportunities; business continuity objectives and change planning.
- Support: resourcing, competence, awareness, communication and documented information control.
- Operation: operational planning and control, Business Impact Analysis (BIA), risk assessment, selecting and implementing business continuity strategies and solutions.
- Business continuity plans and procedures: response structure, warning/communication arrangements, recovery planning.
- Exercise programme and evaluation: designing and conducting exercises, measuring effectiveness and capability validation.
- Performance evaluation and continual improvement: monitoring, measurement, analysis and management review.
These topics align with the ISO structure for management systems and provide interpretative guidance to help translate ISO 22301 requirements into practical activities.
Practical applications - who should use it
EN ISO 22313:2020 is applicable to organizations of all sizes and sectors (industrial, commercial, public, not‑for‑profit) that:
- Implement, maintain or improve a BCMS.
- Need to ensure conformity with a stated business continuity policy.
- Must continue delivering products/services at an acceptable capacity during disruptions.
- Seek to strengthen resilience through effective BCMS application.
Typical users include business continuity managers, risk managers, emergency planners, compliance and audit teams, executive leadership, consultants and public-sector resilience coordinators.
Related standards
- ISO 22301 - Business continuity management system - Requirements (primary standard that ISO 22313 interprets and supports).
- EN/ national versions (e.g., EN ISO 22313:2020 / EN ISO 22313:2020) reflect regional adoption and publication.
Keywords: EN ISO 22313:2020, ISO 22313 guidance, ISO 22301 guidance, BCMS guidance, business continuity management, business impact analysis, risk assessment, continuity planning, resilience.
