ISO 22301 certification UK
The internationally recognised ISO 22301 standard helps you understand and prioritise threats to your organisation. Its BCMS specifies the steps you need to take to reduce the threat of disruption, protect your assets if something does go wrong, and recover quickly from any incidents.
Here are some benefits of using the ISO 22301 framework:
- Minimising disruption: by following the international best practice strategy of ’Plan, Do, Check, Act’, ISO 22301 helps you minimise disruption and maintain your services
- Flexibility and responsiveness: by improving your crisis management techniques, ISO helps you deal quickly with any disruption, local or international, and rapidly restore services
- Accountability: by helping you define acceptable timescales for resuming business activities, the BCMS ensures your stakeholders know what level of service to expect following any disruption
- Competitive advantage: by strengthening management across your organisation, internationally recognised BCMS will increase client confidence in your services
- Continuous improvement: by submitting your Business Continuity Management System to regular audits and risk assessments, you’ll ensure it remains effective
- Regulatory compliance: by demonstrating that you comply with risk management laws regulations, you’ll increase the confidence of employees, customers and other stakeholders
- Save money: in some cases ISO 22301 can reduce internal and external BCMS audit costs, as well as insurance premiums, this could help your business improve its financial performance
- Optimise customer services: by strengthening management controls, you will be able maintain agreed levels of critical services and products to customers even if you face disruption
- Stronger management: by increasing management involvement and identifying internal external risks, the ISO 22301 framework ensures the effectiveness of your BCMS
- Brand reputation: by demonstrating your commitment to maintaining excellent service even in times of disruption, ISO 22301 certification can enhance your reputation with customers.
What the ISO 22301 certification audit covers
Our auditors assess your business continuity management system against every requirement of ISO 22301 and look at how your documented processes work in practice. Every finding is set out in a clear written report, so you know exactly where you stand and what, if anything, needs to change before certification.
Stage 1 and Stage 2 audits
The Stage 1 audit is carried out remotely by video call. The auditor reviews your documentation, scope and readiness for the main audit. The Stage 2 audit takes place at your premises on a date to suit you and checks that your system is implemented and working. Where you need certification quickly, Stage 1 and Stage 2 can be completed within 2 weeks.
What to have ready
- Service provision files showing the work you deliver
- Staff files, including training and competence records
- Your latest management review
- Data analysis, such as business impact analysis results and the outcome of continuity exercises and tests
- Internal audit records and any corrective actions
Surveillance and recertification
Certification runs on a three-year cycle. A surveillance audit takes place each year to confirm your system is being maintained, and a recertification audit is carried out before the end of the third year.
Frequently asked questions
How long does ISO 22301 certification take?
Once your system is in place and you have records to show it working, Stage 1 and Stage 2 can be completed within 2 weeks.
Is the Stage 1 audit carried out on site?
No. Stage 1 is carried out remotely by video call. Stage 2 takes place at your premises.
How often are surveillance audits?
Once a year during the three-year certification cycle, followed by a recertification audit.
How do I get a quote?
Complete our request a free quote form or call 01257 824481 and we will come back to you with a quote.
Other standards we certify
ISO 9001, ISO 14001, ISO 45001, ISO 27001, ISO 18788, ISO 42001, ISO 50001, codes of practice. To see how each audit works from application to surveillance, read about our certification process.