current language
Thailand available in the following languages:
or select your TÜV Rheinland country website:

Business Continuity Management According to ISO 22301

Business Continuity Management According to ISO 22301

Competitive Advantage through Certified Crisis and Emergency Management

Operational risk management is becoming increasingly important. Business processes are getting faster, significantly specialized and more interactive. Any failure or disruption of supporting operational business infrastructures, such as IT, building-specific issues, personnel, suppliers, production processes or any other business unit may lead to an interruption of operations in the best case, or worse, to a long-term stoppage and loss of market-share as well as damage to company image. Optimal business and operation conditions and frameworks are particularly essential to remain competitive in fast-moving markets. Firms need to constantly optimize processes in order to safeguard resources and minimize costs. The principle of Business Continuity Management involves answering the following questions:

  • How do companies proceed and work under sub-optimal conditions, following an unexpected event or a stoppage in an essential business unit or process, for instance?
  • How much would it damage your company’s performance?
  • How would you handle the “worst case scenario”?
  • What is the tolerable maximum downtime?

Business Continuity Management is the comprehensive and structured organization of an efficient crisis and emergency management. It systematically prepares companies to provide comprehensive response to unexpected and damaging events, ensuring that the most important business processes would be only temporarily interrupted in critical situations and emergencies and safeguarding company existence.

Benefits of the ISO 22301 Certification of Your Business Continuity Management at a Glance

  • Increased stability of business processes.
  • Reduced stoppage and recovery delays.
  • Structured approach and procedures in case of incident.
  • Alignment of business processes to the operational risk management process.
  • Ensured compliance with all relevant requirements and international standards.
  • Commitment of Managers to adopt and implement emergency prevention and emergency management within the company.
  • Ensured trust and transparency for all relevant partners and the public.
  • Competitive advantage through compliance with all relevant requirements and worldwide-recognized standards.
  • Identification of potential savings on insurance policies and with service providers.
  • Comprehensive risk assessment at every business level.

Please feel free to contact us at TÜV Rheinland to learn more about how our business continuity management system certification services can benefit your company.

Business Continuity Management Certification Process According to ISO 22301

1. Documentation Review
The auditors examine how far documentation relative to your Business Continuity Management System already meets the Standard ISO 22301 requirements. They also determine the scope of your BCMS application.

2. Status review (optional)
Our auditors first assess the current state of your company on site by conducting a pre-audit (Baseline study). You will be informed of the current status of your business continuity management system and your attention will be specifically drawn to any weakness.

3. Creation of an audit scheme / Scheduling
TÜV Rheinland auditors systematically identify potential gaps and lacunae that hinder the achievement of your set objectives and together with you, prepare scheduling of all testing deadlines.

4. Certification audit
Demonstrate the practical application of your Business Continuity Management System. Our auditors evaluate the appropriateness and effectiveness of your system as compared to the standard specifications. During the certification audit, information is collected on site, proof verification is provided and initial inspection is conducted.

5. Certificate delivery
Upon meeting all criteria, your company will be awarded the ISO 22301 certification. This document certifies your business continuity management system’s operability and compliance with relevant standards. In addition, your company will be registered in our online certification database Certipedia.

6. Follow up audit
Our annual follow up audits helpyou continuously optimize your processes.

Testing Criteria at a Glance

Our set of TÜV Rheinland criteria aligns with the PDCA cycle, among others, and includes all phases of the business continuity management life cycle.

Under the ISO 22301 certification process, our experts examine and evaluate the following areas of your business continuity management system:

  • BCM policy
  • BCM scope of application
  • BCM requirements
  • Assessment of interfaces
  • BCM in the value chain
  • Organization of the business continuity management system
  • Management commitment
  • Business continuity objective target
  • Planning with regard to risks and opportunities
  • Management support with regard to essential resources and competencies
  • BCM communication
  • Business impact analysis
  • Risk assessment
  • Strategy development
  • BCP planning
  • Test scenario
  • Monitoring and improvement of the business continuity management system

Frequently Asked Questions about Business Continuity Management

How do you benefit from business continuity management?

  • Uninterrupted operation of essential business processes is necessary to reach your company objectives.
  • Increase resistance to crisis and thus the resilience of your organization.
  • Obtain documented evidence of an operative emergency management process.
  • Control: Your process structures are controlled and documented, providing you with the awareness of potential risks and the ability to take specific countermeasures.
  • Awareness: Your employees become more confident when knowing how to react appropriately to emergencies and crises.
  • Training staff during periodic tests and drills to react properly in case of emergency and successfully get through the event.
  • Continuity provides a reliable exchange of information to ensure controlled procedures.
  • Increase awareness of risks and how to minimize them.
  • Reduce costs by creating clear structures in order to avoid premium insurance rates.
  • Gain competitive advantage among domestic and international competitors as ISO 22301 is recognized worldwide.
  • Business continuity management considers your business partners and helps you through the entire value chain process.

What does a holistic business continuity management system require?

  • Identification of all critical processes in a company or business unit.
  • Business impact analysis for the detection of potential damage in case of interraption of one critical business process.
  • Risk assessment to reduce probability and impact of potential risks.
  • Strategy development as a proactive measure as well as in response to an emergency.
  • Description of all plans in case of emergency.
  • Scenario-oriented tests and exercises.
  • Monitoring and improvement of the BCMS.

What are the key questions for a company?

  • How can we keep serving our clients? How would they react to a long interraption?
  • How can we maintain our critical business processes?
  • How can our critical business procedures still operate at a tolerable level in case of emergency?
  • How can we minimize losses and consequences?
  • How far would it damage our company’s performance?
  • Are we considering all downtime scenarios that are reaching beyond simple IT failures?
  • What is the tolerable maximum downtime?
  • Which legal requirements would be violated?
  • Which legitimate interests have to be maintained for our stakeholders?


pdf Business Continuity Management at DZ BANK FFM 314 KB Download
pdf Business Continuity Management at Huawei Technologies 319 KB Download

Related Topics

The Business Continuity Institute

The Crisisnavigator

Bundesnetzagentur (english)

This might also interest you

Advanced Training for Working Professionals

Advanced Training for Working Professionals

Professional Development: Specialist and Manager Training for Your Working Staff.


Surprisingly Transparent. The TÜV Rheinland Test Mark

Surprisingly Transparent. The TÜV Rheinland Test Mark

Certipedia - The free online certificate database for tested and certified products.



Get in contact with us!

Get in contact with us!

Last Visited Service Pages