Features / Standards
ISO 22301 software
Business continuity management. A business continuity system: know what must keep running, plan for disruption, and rehearse the plans.
Who it’s for
Organizations whose customers, regulators or risks demand that critical services survive disruption.
Edition notes. Current edition is ISO 22301:2019 with a 2024 climate amendment; a wider revision is reported to be in development.
What you still need
The official standard from ISO (iso.org or your national standards body), and — if you want a certificate — an accredited certification body to audit you. Total ISO helps you build, run and evidence the system; it doesn’t grant certification.
What Total ISO gives you for ISO 22301
Each requirement area below maps to a screen in the app. Your “Requirements” page shows what’s in place and what’s still to do. Coverage for ISO 22301: full requirements map with purpose-built records.
4Context and interested parties
Know the internal and external issues and the needs of interested parties that affect your system.
In the app: Relevant issues
4Scope of the system
Define the boundaries and applicability of your system.
In the app: Facilities & processes
5Roles, responsibilities and authorities
Assign and communicate who does what.
In the app: Org chart & people
5Policy
A business continuity policy set, communicated and maintained by top management. File it under the folder “Policy”.
In the app: Documents
6Risks and opportunities
Assess risks to your continuity and plan responses.
In the app: Risks & opportunities
6Objectives and planning to achieve them
Set measurable objectives with owners, resources and dates.
In the app: Objectives
7Competence and training
Decide what competence people need and keep evidence.
In the app: Training matrix
7Communication
Decide what, when, with whom and how you communicate.
In the app: Communication plan
7Documented information
Create, control and keep the documents and records the system needs.
In the app: Documents
8Operational planning and control
Plan and control the processes that deliver your product or service. File procedures under “Procedures”.
In the app: Documents
9Monitoring and measurement
Decide what to monitor, how often, and evaluate the results.
In the app: Facility inspections
9Internal audit
Audit your system at planned intervals and report the results.
In the app: Internal audits
9Management review
Top management reviews the system at planned intervals.
In the app: Management review
10Nonconformity and corrective action
React to problems, find root causes, correct, and check it worked.
In the app: Corrective actions
8Business impact analysis
Identify critical activities, how long you can be without them, and what they depend on.
In the app: Business impact analysis
8Continuity strategies and solutions
Decide how critical activities will be protected and resumed. File them under “Continuity strategy”.
In the app: Documents
8Continuity plans and procedures
Documented plans that say who does what when disruption happens. File them under “Continuity plans”.
In the app: Documents
8Exercise and testing programme
Rehearse the plans and learn from the results.
In the app: Emergency plans
Disruptive incidents
Report, investigate and learn from incidents and near misses.
In the app: Incidents
Working to more than one standard?
Most requirements overlap, so you enter things once. One risk register, one set of documents, one audit programme, one corrective-action process — shared by every standard you choose. Your plan includes one standard; each extra is a simple monthly add-on (see pricing) — $20/month for ISO 22301 when it isn’t your included one. Try them all free during the trial.
Mapping follows ISO 22301 (2019 + Amd 1:2024) as publicly described. Clause numbers appear only where we are confident of them. Standards are revised periodically; check which edition your certification body audits against. ISO is a registered mark of the International Organization for Standardization. Total ISO is not affiliated with or endorsed by ISO.