ISO 22301:2019 and business continuity management – Understand how to plan, implement and enhance a business continuity management system (BCMS)

CHAPTER 4: PLANNING

6.1 Actions to address risks and opportunities

The first step in the implementation process is to identify the context of your organisation and the issues that arise from it, and the interested parties and their requirements. This part of the Standard uses those issues and requirements to identify and mitigate risks, and highlight opportunities that apply to the BCMS (risks related to business disruption are covered in a later section of ISO 22301).

The goal here, as stated in part 6.1.1 of the Standard, is to:

1.Provide assurance that the BCMS achieves its intended outcomes (i.e. that the organisation can recover from a disruption before the impact becomes unacceptable);

2.Reduce undesirable effects (i.e. eliminating factors ...