Which communication structure should be established for managing information between various groups of stakeholders in the organization?

According to ISO 22301 Clause 7.4, an organization must determine the need for both internal and external communications relevant to the BCMS. Managing information between various groups of stakeholders specifically in (within) the organization requires an established internal communication structure. This ensures that employees, internal departments, and management maintain situational awareness, coordinate effectively during disruptions, and understand their specific roles within the business continuity plans.

B. External Communication: This relates to communicating with outside parties such as the media, regulatory bodies, customers, and emergency services, not stakeholders located within the organization.

1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements. Clause 7.4 (Communication).

2. ISO 22313:2020, Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301. Section 7.4 (Internal and external communication).