Which function(s) provide support to the critical functions?

In the context of Business Continuity Management (BCM) and ISO 22301, "supporting functions" are the activities, processes, and resources that enable an organization's critical functions to operate. The Business Impact Analysis (BIA), a core component of ISO 22301, is the process used to identify these critical functions and their dependencies. These dependencies are the supporting functions, which can include IT services, human resources, facilities, and supply chain logistics. Without these supporting functions, the critical functions cannot be performed, making their identification and recovery planning essential for effective business continuity.

B. Procedural functions: This is not a standard classification within the ISO 22301 framework. While all functions, whether critical or supporting, operate based on procedures, "procedural function" does not describe its role in supporting other functions.

1. ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements.

Section 8.2.2 (Business impact analysis): This clause mandates that the BIA process shall include "identifying the activities that support the provision of its products and services" and "identifying dependencies and supporting resources for these activities, including... suppliers and partners...". This directly establishes the concept of activities/functions that "support" the delivery of products and services, which are underpinned by critical functions.

2. Heng, G. M. (2011). A Manager's Guide to ISO 22301. The Chartered Quality Institute.

Chapter 5: Business Impact Analysis and Risk Assessment: This guide explains that a key output of the BIA is the identification of interdependencies between critical activities and the "supporting activities" or resources they rely on. It emphasizes that the recovery of a critical activity is contingent on the availability of its supporting functions.

3. Warwick, K. (2013). An Introduction to Business Continuity Management and ISO 22301:2012. University of Reading.

Lecture Notes on Business Impact Analysis (BIA): Course materials frequently explain that the BIA process involves mapping dependencies. Critical business processes are identified first, followed by the "supporting processes, people, technology, and facilities" required for them to function. This directly aligns with the term "supporting functions."