ISO 22301:2019 Business Continuity Management Toolkit
41 documents built around the Business Impact Analysis, continuity plans, and exercising
ISO 22301 has no Annex A control catalogue and no Statement of Applicability. Its core is Clause 8: a fixed sequence of business impact analysis, risk assessment, strategy, plans, and exercising. This toolkit follows that sequence.
What makes this different
- Business Impact Analysis register with RTO, RPO, and MTPD per activity, 6 pre-filled activities across all four criticality tiers, and a live dashboard
- Crisis Management Plan with an incident-activation flow diagram, activation criteria, and a response team structure
- Business Continuity Plan template (per activity), IT Disaster Recovery Plan, and Continuity Strategy document
- Exercise Programme and Exercise Log, since an untested plan is unproven to an auditor
- BC Risk Register with dashboard, pre-filled with disruption risks (cyber incident, key-person loss, facility loss, supplier failure)
- Supplier Continuity Register, Incident Log, and crisis communication templates
- Master Document Control Register, Legal & Regulatory Register, and BC Objectives Tracker included
- Delivered as editable Word/Excel/PowerPoint and matching PDFs
Built for real audits
Every document carries a doc-control header with owner, approver, version, review cycle, and ISO 22301 clause reference, plus "Scalability notes" for right-sizing to your organization.
What's Included
- 41 documents across 20 organized folders Business Impact Analysis register with RTO/RPO/MTPD, 6 pre-filled activities, and dashboard Crisis Management Plan with incident-activation flow diagram Business Continuity Plan template, IT Disaster Recovery Plan, and Continuity Strategy Exercise Programme with cycle diagram and Exercise Log BC Risk Register with dashboard Supplier Continuity Register, Incident Log, and crisis communication templates Business Continuity Policy and 3 procedures (warning and communication, plan activation, restoration) Master Document Control Register, Legal & Regulatory Register, BC Objectives Tracker Internal audit pack — plan, checklist, corrective action record and register Business continuity awareness training deck (9 slides) + attendance tracking Every document also delivered as a matching PDF
Learning Outcomes
- Run a Business Impact Analysis and set defensible RTOs, RPOs, and MTPDs Understand the Clause 8 sequence: BIA, risk assessment, strategy, plans, exercising Write a Crisis Management Plan your team can execute under pressure Build an exercise programme that proves your plans work
Who It's For
Organizations pursuing ISO 22301 certification; companies whose customers require documented continuity capability; teams that hold ISO 27001 and want to extend it to full business continuity; consultants delivering continuity engagements to multiple clients.