This section lists the normative references that are indispensable for the
application of the standard, such as ISO 31000 and ISO/IEC 27000.
Terms and definitions: This section provides the definitions of the terms used in the standard, such as
business continuity, incident, and risk.
Context of the organization: This section requires the organization to determine its internal and
external issues, the needs and expectations of its interested parties, and the scope and boundaries of
its BCMS.
Leadership: This section requires the top management to demonstrate leadership and commitment,
establish the business continuity policy and objectives, assign roles and responsibilities, and support
the BCMS.
Planning: This section requires the organization to plan actions to address risks and opportunities,
achieve the business continuity objectives, and integrate the BCMS into its business processes.
Support: This section requires the organization to provide the necessary resources, competence,
awareness, communication, and documented information to support the BCMS.
Operation: This section requires the organization to implement the operational planning and control,
conduct the business impact analysis and risk assessment, determine the business continuity
strategy and solutions, establish and implement the business continuity procedures, and exercise
and test the BCMS.
Performance evaluation: This section requires the organization to monitor, measure, analyze, and
evaluate the performance and effectiveness of the BCMS, conduct internal audits, and review the
BCMS at planned intervals.
Improvement: This section requires the organization to identify and implement opportunities for
improvement, address nonconformities and take corrective actions, and continually improve the
BCMS.
Annex A: This section provides informative guidance on the relationship between the clauses of ISO
22301:2019 and ISO 22313:2020, which is the international standard for business continuity
management systems - guidance on the use of ISO 22301.
Annex B: This section provides informative guidance on the relationship between the clauses of ISO
22301:2019 and ISO 31000:
