ISO 22301 revision: what is coming
- Current edition
- ISO 22301:2019 + Amd 1:2024
- Next edition
- ISO 22301, 3rd edition
- Publication
- Not yet scheduled
The revision is at committee draft stage (ISO/TC 292). ISO 22301:2019 remains fully valid; a transition period will be set after the new edition is published.
Timeline
- 2026Committee draft (ISO/CD 22301) reviewed; comment period closed
Last checked 28 October 2026. Your certification body confirms the dates that apply to your certificate.
ISO 22301:2019 sets requirements for a business continuity management system. It asks you to understand which activities matter most, how fast they must recover, and what strategies, plans and resources make recovery possible, then to exercise and improve those plans.
We run business impact analysis workshops, develop continuity and crisis communication plans, design exercises from tabletop to full failover, and prepare you for certification. Where you hold ISO 27001, we align continuity with your ICT readiness and incident management controls.
Who it is for
- Financial institutions and their critical vendors
- Telecoms, logistics and utilities
- Healthcare providers and outsourcing companies
- Organisations subject to operational resilience rules such as DORA
What you gain
- Recover critical activities within agreed timeframes
- Meets bank and regulator continuity clauses in contracts
- Tested plans instead of shelf documents
- Supports DORA, SAMA and central bank resilience expectations
Your path to certification
Gap assessment
We compare what you do today with every requirement and control, then give you a prioritised gap report and a realistic timeline.
Design and documentation
Scope, policies, procedures, risk methodology and records, written to fit how your teams actually work, not a template binder.
Implementation and training
We help owners put controls in place, train the people who run them and start collecting evidence.
Internal audit and management review
An independent internal audit and a structured management review prove the system works before the certification body looks at it.
Certification audit support
We prepare you for Stage 1 and Stage 2 with your chosen accredited certification body and help close any findings quickly.
Surveillance and continual improvement
Optional managed support keeps evidence current through annual surveillance audits and the three-year recertification.