ISO 22313-2020 PDF

Full title and description

Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301. This international guidance standard explains and illustrates how to apply the requirements of ISO 22301 for establishing, implementing, maintaining and improving a business continuity management system (BCMS), based on good international practice.

Abstract

ISO 22313:2020 provides recommendations and explanatory guidance to help organizations interpret and apply the requirements in ISO 22301. It is applicable to organizations of any size or sector that implement, maintain or seek conformity with a BCMS, and it focuses on preparedness, response and recovery measures to maintain delivery of products and services during disruptive incidents.

General information

• Status: Published.
• Publication date: February 2020 (ISO edition 2, 2020-02).
• Publisher: International Organization for Standardization (ISO), prepared by ISO/TC 292 (Security and resilience).
• ICS / categories: 03.100.01 (Company organization and management in general); 03.100.70 (Management systems).
• Edition / version: Edition 2 (2020), replaces ISO 22313:2012.
• Number of pages: 55 pages (ISO published version).

Scope

Offers guidance for applying the requirements of ISO 22301 (BCMS requirements) rather than restating those requirements. It supports organizations that need to continue delivering products and services at an acceptable predefined capacity during disruptions, and is intended to be adaptable to organizations of all sizes and types across public, private and not-for-profit sectors.

Key topics and requirements

• Alignment with ISO 22301 clause structure and intent: explains purpose and interpretation of clauses in ISO 22301.
• Context of the organization and interested parties: guidance on scoping, needs and expectations.
• Leadership, policy and roles: guidance on top management commitment and responsibility for BCMS.
• Risk assessment and business impact analysis (BIA): principles and practical considerations for BIA and risk-based planning (see also ISO/TS 22317 for detailed BIA guidance).
• Business continuity strategy, planning and support: options for continuity strategies, documented information and competence.
• Operational preparedness, exercises and testing: guidance on exercises, response procedures and continual improvement.
• Performance evaluation and improvement: monitoring, internal audit, management review and corrective actions in the BCMS context.

Typical use and users

Used by organizations implementing or improving a BCMS, business continuity / resilience managers, emergency planners, consultants and trainers, internal audit teams and certification bodies (as guidance, not as a certification requirement itself). It is also used by public-sector agencies and not-for-profit organizations seeking to align continuity arrangements with ISO 22301.

Related standards

Directly linked to ISO 22301:2019 (BCMS requirements) and to supporting documents in the ISO 22300 series, for example ISO/TS 22317 (Guidelines for business impact analysis). Other related standards in the security & resilience family include ISO 22300 (vocabulary), ISO 22316 (organizational resilience), ISO 22320 (incident management) and subsequent ISO projects/amendments to ISO 22301.

Keywords

business continuity, BCMS, guidance, resilience, business impact analysis, continuity planning, ISO 22301, incident preparedness, continuity strategy, exercises and testing.

FAQ

Q: What is this standard?

A: ISO 22313:2020 is guidance for applying the requirements of ISO 22301 (Business Continuity Management Systems). It explains intent and offers recommendations based on international good practice.

Q: What does it cover?

A: It covers interpretation and practical guidance across the BCMS lifecycle — context, leadership, planning, support, operation, performance evaluation and continual improvement — to help organizations prepare for, respond to and recover from disruptions.

Q: Who typically uses it?

A: Business continuity and resilience professionals, organizational leadership, consultants, trainers, auditors and certification bodies as a source of guidance when implementing or assessing a BCMS aligned to ISO 22301.

Q: Is it current or superseded?

A: ISO 22313:2020 is the current edition (second edition, published February 2020) and supersedes ISO 22313:2012. Users should check for any newer ISO publications or related amendments in the ISO 22300 series when planning implementations.

Q: Is it part of a series?

A: Yes — it is part of the ISO family of standards on security and resilience / business continuity (ISO 22300 series) and is intended to be used alongside ISO 22301 (requirements) and complementary documents such as ISO/TS 22317 (BIA guidance) and other ISO guidance on resilience and incident management.

Q: What are the key keywords?

A: business continuity, BCMS, resilience, ISO 22301, guidance, business impact analysis, continuity planning, exercises, incident response.