Business Continuity Management
Shows that you can keep critical activities running, or restore them, after a disruption.
A complete documentation kit written to ISO 22301:2019 with Amendment 1:2024: manual, policies, procedures, SOPs, forms, registers, process maps, indicator and risk frameworks, audit and management review packs, an implementation roadmap, sector guides and commercial templates, with every clause mapped to the document that meets it, and impact analysis, risk assessment, strategies, response, plans and exercises built into the system.
- Edition 2019
- 157 Word + 32 Excel files
- One organization
- Downloads open 7 days after payment
You need this if
- Clients ask how long you would be down after an outage, fire or cyber incident.
- You need a business impact analysis and tested continuity plans.
- A regulator or contract requires a certified continuity system.
What you get, in numbers
Counted from the files in the pack. Every file title is listed further down.
What this toolkit is not
Worth knowing before you buy.
Not the certificate
Certification is decided by an independent certification body after it audits a system you have run for some months, with records. No toolkit can guarantee it.
Not the ISO text
The standard is copyrighted and sold by ISO and national standards bodies. Buy your own copy. The toolkit describes requirements in its own words.
Not a consultant
We do not assess your organization. You review, adapt and approve every document before you use it.
What’s inside
15 numbered folders. Open any folder to see the title of every file in it. Titles only: the files themselves are delivered after payment.
00Start Here
Six guides: read-me, how to implement with an initial review checklist, documentation structure, quick start, an ISO 22301:2019 clause mapping guide including the Amendment 1:2024 climate changes, and a certification preparation guide.
6 files
- WordSH-001 Read Me Guide
- WordSH-002 How to Implement Guide
- WordSH-003 Documentation Structure Guide
- WordSH-004 Quick Start Guide
- WordSH-005 ISO 22301-2019 Clause Mapping Guide
- WordSH-006 Certification Preparation Guide
01Master Index
One Excel register of every controlled document: number, title, type, owner, department, retention and clause, with review dates and overdue flags.
1 file
- ExcelREG-01 Master Document Register
02Manual
The Business Continuity Management System Manual, section-numbered to match clauses 4 to 10: context including the climate decision, scope, leadership, planning, support, operation (impact analysis, risk assessment, strategies, response, plans, exercises, evaluation), performance evaluation and improvement.
1 file
- WordBCM-001 Business Continuity Management System Manual
03Procedures (P-001 to P-024)
Document and record control, context and scope, leadership and roles, risks and opportunities, objectives and changes, resources and competence, communication, operational planning, business impact analysis, disruption risk assessment, strategies and solutions, resources and implementation, response structure and warning, plans and recovery, exercise programme, evaluation, supplier continuity, vital records and ICT continuity, monitoring, internal audit, management review, corrective action and improvement. Each has a flowchart, responsibility table, controls, risk and indicator matrices.
24 files
- WordP-001 Document Control Procedure
- WordP-002 Record Control Procedure
- WordP-003 Context, Interested Parties, Legal Requirements and Scope Procedure
- WordP-004 Leadership, Policy and Roles Procedure
- WordP-005 Risks and Opportunities Procedure
- WordP-006 Objectives and Planning of Changes Procedure
- WordP-007 Resources, Competence and Awareness Procedure
- WordP-008 Communication Procedure
- WordP-009 Operational Planning and Control Procedure
- WordP-010 Business Impact Analysis Procedure
- WordP-011 Disruption Risk Assessment Procedure
- WordP-012 Continuity Strategies and Solutions Procedure
- WordP-013 Resource Requirements and Implementation of Solutions Procedure
- WordP-014 Response Structure, Warning and Communication Procedure
- WordP-015 Business Continuity Plans and Recovery Procedure
- WordP-016 Exercise Programme Procedure
- WordP-017 Evaluation of Documentation and Capabilities Procedure
- WordP-018 Supplier and Dependency Continuity Procedure
- WordP-019 Vital Records, Data and ICT Continuity Procedure
- WordP-020 Monitoring, Measurement and Evaluation Procedure
- WordP-021 Internal Audit Procedure
- WordP-022 Management Review Procedure
- WordP-023 Nonconformity and Corrective Action Procedure
- WordP-024 Continual Improvement Procedure
04Policies (POL-001 to POL-012)
Business continuity policy, document control, record retention, risk and opportunity, legal and regulatory requirements, competence and awareness, incident management and crisis communication, suppliers and dependencies, information and ICT continuity, people safety and welfare, exercise and testing, and audit, review and improvement.
12 files
- WordPOL-001 Business Continuity Policy
- WordPOL-002 Document Control Policy
- WordPOL-003 Record Retention Policy
- WordPOL-004 Risk and Opportunity Policy
- WordPOL-005 Legal and Regulatory Requirements Policy
- WordPOL-006 Competence, Training and Awareness Policy
- WordPOL-007 Incident Management and Crisis Communication Policy
- WordPOL-008 Supplier and Dependency Continuity Policy
- WordPOL-009 Information and ICT Continuity Policy
- WordPOL-010 People Safety and Welfare in Disruption Policy
- WordPOL-011 Exercise and Testing Policy
- WordPOL-012 Internal Audit, Management Review and Improvement Policy
05SOP Library (SOP-001 to SOP-026)
Step-by-step task instructions with flowcharts and acceptance criteria: context workshop, risk workshop, business impact analysis, dependency mapping, disruption risk assessment, strategy selection, incident activation, crisis communication, plan maintenance, recovery, tabletop and failover exercises, backup and restore testing, supplier review, post-incident review, internal audit and corrective action.
26 files
- WordSOP-001 Document Issue and Withdrawal
- WordSOP-002 Records Filing and Archiving
- WordSOP-003 Context Review Workshop
- WordSOP-004 Policy and Roles Communication
- WordSOP-005 Risk and Opportunity Workshop
- WordSOP-006 Change Assessment
- WordSOP-007 Competence and Training
- WordSOP-008 Stakeholder Communication Planning
- WordSOP-009 Outsourced Process Control
- WordSOP-010 Business Impact Analysis Workshop
- WordSOP-011 Dependency Mapping
- WordSOP-012 Disruption Risk Assessment
- WordSOP-013 Strategy Selection
- WordSOP-014 Resource Provisioning
- WordSOP-015 Incident Activation
- WordSOP-016 Crisis Communication
- WordSOP-017 Business Continuity Plan Maintenance
- WordSOP-018 Recovery and Resumption
- WordSOP-019 Tabletop Exercise
- WordSOP-020 Failover and Live Exercise
- WordSOP-021 Backup and Restore Testing
- WordSOP-022 Supplier Continuity Review
- WordSOP-023 Post-Incident Review
- WordSOP-024 Internal Audit Conduct
- WordSOP-025 Management Review Preparation
- WordSOP-026 Corrective Action Tracking
06Forms (FR-001 to FR-057)
Fifty-seven forms. Each comes with field descriptions, a blank form that prints on its own, and a completed example record.
57 files
- WordFR-001 Document Change Request
- WordFR-002 Document Distribution Log
- WordFR-003 Document Review Record
- WordFR-004 Record Disposal Authorization
- WordFR-005 Context and Climate Review
- WordFR-006 Interested Party and Legal Requirements Review
- WordFR-007 BCMS Scope Statement
- WordFR-008 Roles, Responsibilities and Authorities Record
- WordFR-009 Policy Communication Record
- WordFR-010 Risk and Opportunity Assessment
- WordFR-011 Business Continuity Objectives Plan
- WordFR-012 Change Request and Assessment
- WordFR-013 Post-Change Review
- WordFR-014 Resource Request
- WordFR-015 Competence Definition and Assessment
- WordFR-016 Training and Awareness Record
- WordFR-017 Communication Plan
- WordFR-018 Stakeholder Communication Record
- WordFR-019 Outsourced Process Control Record
- WordFR-020 BIA Questionnaire
- WordFR-021 BIA Summary and Prioritization
- WordFR-022 Dependency Map Record
- WordFR-023 Disruption Risk Assessment Worksheet
- WordFR-024 Risk Treatment Plan
- WordFR-025 Strategy Options Evaluation
- WordFR-026 Strategy Selection Record
- WordFR-027 Resource Requirements Record
- WordFR-028 Solution Implementation Plan
- WordFR-029 Incident Response Team and Authority Record
- WordFR-030 Incident Activation and Warning Record
- WordFR-031 Incident Log
- WordFR-032 Business Continuity Plan
- WordFR-033 Recovery and Resumption Record
- WordFR-034 Exercise Programme
- WordFR-035 Exercise Plan
- WordFR-036 Exercise Report
- WordFR-037 Documentation and Capability Evaluation
- WordFR-038 Post-Incident Review
- WordFR-039 Supplier Continuity Assessment
- WordFR-040 Supplier Continuity Agreement Checklist
- WordFR-041 Backup and Restore Test Record
- WordFR-042 ICT Recovery Test Record
- WordFR-043 Business Continuity Performance Report
- WordFR-044 Indicator Definition Sheet
- WordFR-045 Annual Audit Programme
- WordFR-046 Audit Plan
- WordFR-047 Internal Audit Checklist
- WordFR-048 Audit Report
- WordFR-049 Auditor Competence Record
- WordFR-050 Management Review Agenda
- WordFR-051 Management Review Minutes
- WordFR-052 Management Review Action Plan
- WordFR-053 NCR Form
- WordFR-054 Corrective Action Request
- WordFR-055 Corrective Action Effectiveness Review
- WordFR-056 Improvement Suggestion Form
- WordFR-057 Improvement Project Charter
07Registers (REG-01 to REG-18)
Eighteen Excel registers with examples, drop-down lists, automatic calculations, due dates and overdue flags: activities and impact (with MTPD and RTO checks), dependencies, disruption risks (with a risk score rule), strategies and solutions, plans, suppliers (with a recovery gap check), contacts and call tree, incidents, exercises, competence, corrective actions, audits, changes, risks and opportunities, and objectives.
18 files
- ExcelREG-01 Document Register
- ExcelREG-02 Record Register
- ExcelREG-03 Legal, Regulatory and Contractual Requirements Register
- ExcelREG-04 Activity and Business Impact Register
- ExcelREG-05 Dependency Register
- ExcelREG-06 Disruption Risk Register
- ExcelREG-07 Strategy and Solution Register
- ExcelREG-08 Business Continuity Plan Register
- ExcelREG-09 Supplier Continuity Register
- ExcelREG-10 Contact and Call Tree Register
- ExcelREG-11 Incident Register
- ExcelREG-12 Exercise and Test Register
- ExcelREG-13 Training and Competence Register
- ExcelREG-14 Nonconformity and Corrective Action Register
- ExcelREG-15 Audit Register
- ExcelREG-16 Change Register
- ExcelREG-17 Risk and Opportunity Register
- ExcelREG-18 Objectives and Programme Register
08Process Maps
Eight swimlane maps with inputs, outputs, owners and indicator links: context and planning, impact analysis and risk, strategies and resources, response and communication, plans and recovery, exercises and evaluation, suppliers and ICT, and audit, review and improvement.
8 files
- WordPM-01 Context, Leadership and Planning Process Map
- WordPM-02 Business Impact Analysis and Risk Assessment Process Map
- WordPM-03 Strategies, Solutions and Resources Process Map
- WordPM-04 Response Structure, Warning and Communication Process Map
- WordPM-05 Plans, Recovery and Return to Normal Process Map
- WordPM-06 Exercise Programme and Evaluation Process Map
- WordPM-07 Suppliers, Dependencies and ICT Continuity Process Map
- WordPM-08 Performance, Audit, Review and Improvement Process Map
09Indicators & Risk
89 indicators with formulas and targets in a filterable matrix, corporate and department frameworks, a balanced scorecard, a 5 x 5 risk matrix with 39 example risks, and an improvement opportunity matrix with 25 examples.
6 files
- WordKPI-01 Corporate Business Continuity Indicator Framework
- WordKPI-02 Department Indicator Framework
- ExcelKPI-03 Balanced Scorecard
- ExcelKPI-04 Process Indicator Matrix
- ExcelRSK-01 Risk Management Matrix
- ExcelRSK-02 Opportunity Matrix
10Audit
Annual audit programme covering every clause and prioritized activity, audit plan, notification, auditor competence matrix, a 56-question checklist by clause, a complete audit report and a findings tracker.
7 files
- WordAUD-01 Annual Audit Programme
- WordAUD-02 Audit Plan
- WordAUD-03 Audit Notification
- ExcelAUD-04 Auditor Competence Matrix
- ExcelAUD-05 Audit Checklist by Clause
- WordAUD-06 Audit Report
- ExcelAUD-07 Follow-up Tracker
11Management Review
Agenda, inputs checklist covering every item of clause 9.3.2, completed sample minutes with the required outputs, action plan and a dashboard.
5 files
- WordMRV-01 Management Review Agenda
- WordMRV-02 Management Review Inputs Checklist
- WordMRV-03 Management Review Minutes Template
- ExcelMRV-04 Management Review Action Plan
- ExcelMRV-05 Management Review Dashboard
12Implementation
An eight-month roadmap with activities, milestones, deliverables and responsibilities, and a task tracker.
2 files
- WordIMP-01 Implementation Roadmap
- ExcelIMP-02 Implementation Tracker
13Customization
Guides with risks, controls and indicators for logistics and fulfilment, IT services and cloud, banking and payments, healthcare providers, manufacturing, retail, food and hospitality, telecommunications and utilities, construction and facilities management, public sector and education, and professional services and outsourcing.
10 files
- WordCUS-01 Logistics, Warehousing and Fulfilment Customization Guide
- WordCUS-02 IT Services, Cloud and Data Centres Customization Guide
- WordCUS-03 Banking, Finance and Payments Customization Guide
- WordCUS-04 Healthcare Providers Customization Guide
- WordCUS-05 Manufacturing and Industrial Customization Guide
- WordCUS-06 Retail, Food and Hospitality Customization Guide
- WordCUS-07 Telecommunications and Utilities Customization Guide
- WordCUS-08 Construction and Facilities Management Customization Guide
- WordCUS-09 Public Sector, Education and Non-profit Customization Guide
- WordCUS-10 Professional Services and Outsourcing Customization Guide
14Commercial
Gap assessment checklist, certification readiness checklist, implementation and training proposal templates, consultancy agreement template and audit preparation checklist.
6 files
- ExcelCOM-01 Gap Assessment Checklist
- ExcelCOM-02 Certification Readiness Checklist
- WordCOM-03 Implementation Proposal Template
- WordCOM-04 Training Proposal Template
- WordCOM-05 Consultancy Agreement
- ExcelCOM-06 Audit Preparation Checklist
Sample pages
Pages from the delivered files, before your company details are applied.
After you download
The order most organizations follow.
Before you buy
Is the text of ISO 22301:2019 included?
No. The standard is copyrighted by ISO and sold by ISO and national standards bodies. Buy your own copy; Amendment 1:2024 on climate action changes is available free from ISO. The toolkit describes requirements in its own words and maps every clause to the document that meets it, so you can check each against the standard.
Which edition does the kit follow?
ISO 22301:2019 with Amendment 1:2024, the current edition. A revision is in development but not published; the kit does not rely on drafts, and we will review it when a new edition is published. Amendment 1:2024 changes clauses 4.1 and 4.2 (climate change), which the kit covers.
Does the kit replace a risk assessment or a recovery plan for our business?
No. It gives you the system, templates and records. The business impact analysis, risk assessment, strategies, recovery times and plans must be developed from your own business and tested in your own exercises. It does not replace specialist advice on specific hazards such as cyber security or pandemic planning.
Are the examples, recovery times and figures real data?
No. Names, activities, recovery times, thresholds, costs and incidents in example records are fictional and marked as examples. Your own must come from your business impact analysis, risk assessment, contracts and regulators.
Can we edit the documents after purchase?
Yes. Files are delivered as standard, unlocked .docx and .xlsx files. Nothing is watermarked or restricted. Items such as prepared-by names and company profile facts are left for you to complete.
Will this get us certified on its own?
The toolkit gives you a complete, clause-mapped documentation baseline and tools for operating the system. Certification is decided by independent bodies after they audit a working system, including sampling of records and review of exercises, so you must run the system for some months first. Neither a toolkit nor a management system guarantees that activities will continue in a disruption or that certification will be granted.
How long can we download the files?
For 7 days from payment. In that time you can enter your company details, correct them and regenerate, and download as often as you need. After 7 days the purchase stays in your account history, but the download closes. Save the ZIP somewhere safe.
What if we need the files again later?
Buying the same toolkit again is a new order with its own 7-day download window. Each purchase is listed separately in your account.
Licence
One purchase licenses one organization to use, edit and adapt the documents for its own management system. You may not resell, share or publish the toolkit or its templates. Each file carries a footer line with the buyer’s email and order number. Full wording is in the Terms & licence.