Exciting news: British Assessment Bureau will rebrand as Amtivo in 2027!
Find out more >>

ISO 22301 Certification

Business Continuity Management Systems (BCMS)

ISO 22301 certification shows that your organisation has a strong Business Continuity Management System (BCMS). It helps reduce disruption, protect operations, and improve your ability to recover from unexpected events. Certification supports customer confidence, tender success, regulatory readiness, and long-term organisational resilience.

amtivo feefo rating

Request a Quote

Enter your details below to get started.

What Is ISO 22301 Certification? 

ISO 22301 certification for Business Continuity Management Systems is a formal, independent check confirming that your organisation meets the international standard for business continuity. 

ISO 22301 certification is increasingly expected or specified as a condition of doing business in sectors with high operational dependency, such as financial services, critical infrastructure, and outsourced supply chains, helping organisations demonstrate resilience and win client trust. 

For more details about ISO 22301 and its benefits, including costs and process, please visit our ISO 22301 Standards page

 

ISO 22301 Certification

Why Organisations Pursue ISO 22301 Certification 

Businesses seek ISO 22301 certification to show they are ready to respond to disruption and to strengthen business continuity planning. 

Common reasons include: 

  • Winning contracts or meeting supply chain requirements 
  • Reducing risks of disruption and downtime 
  • Improving internal resilience and recovery processes 
  • Demonstrating leadership and responsibility 
  • Supporting regulatory or sector expectations 
  • Building stakeholder trust and assurance 

Explore recent case studies to see why clients chose certification and what it helped them achieve. 

Key ISO 22301 Requirements

To be certified, an organisation must implement a Business Continuity Management System aligned with the requirements set out in ISO 22301:2019. These requirements help create a structured way to plan for and respond to disruptive events.

tick-icon

Understanding context and interested parties

You must understand what could affect your ability to operate, including legal, regulatory, and customer expectations.

tick-icon

Leadership and commitment

Top management must lead business continuity efforts and make sure responsibilities are clear.

tick-icon

Business continuity planning

Set the direction of the business continuity management system. Help to establish business continuity objectives and plan the actions needed to address the risks and opportunities identified during the earlier context and leadership stages.

tick-icon

Support and resources

Works to ensure that people have the right resources, competence, training, and information to operate and maintain the BCMS.

tick-icon

Operational control

Carry out the core continuity work: conduct the business impact analysis and risk assessment to identify key activities and the impacts of disruption, set business continuity strategies and plans to maintain and recover operations, and exercise those plans and respond to incidents.

tick-icon

Performance evaluation

Measure how well your continuity plans work and improve them over time.

tick-icon

Continual improvement

Take action to improve your BCMS after testing or real incidents.

These areas form the foundation of a dependable and effective BCMS.

What Is the ISO 22301 Certification Process and Timeline?

There is a clear process to achieving ISO 22301 certification. You must show that your BCMS meets the requirements of the standard. Our experienced auditors will carry out a two-stage audit to assess how your BCMS works. Our in-house Client Success Team will guide you through the steps and help you prepare for your Stage 1 Audit.

STEP 1
STEP 2
STEP 3
STEP 4
Stage 1 audit – identifying gaps

There’s no pressure for the first audit – many of our clients are surprised by what their business already has in place. A report will highlight the steps you need to take to achieve your certification.

Stage 2 audit – in-depth review

When you’re ready, our auditor will complete a full assessment to establish whether your management systems and processes meet the standard’s requirements. A critical part of your Stage 2 audit will be reviewing real examples of the delivery of your products and services.

Auditor’s recommendations

You’ll be advised of the Auditor’s recommendations on the day, which our compliance department will ratify, and your certification will be issued following the decision, subject to compliance with the standard.

SUCCESS! Certification issued

We’ll help you keep up to date. ISO certification’s excellent reputation is driven by its requirement for ongoing audits and continual improvement, so we’ll keep in touch and arrange annual audits to keep your certification up to date.

What Is the ISO 22301 Certification Process and Timeline?

There is a clear process to achieving ISO 22301 certification. You must show that your BCMS meets the requirements of the standard. Our experienced auditors will carry out a two-stage audit to assess how your BCMS works. Our in-house Client Success Team will guide you through the steps and help you prepare for your Stage 1 Audit.

STEP 1
Stage 1 audit – identifying gaps

There’s no pressure for the first audit – many of our clients are surprised by what their business already has in place. A report will highlight the steps you need to take to achieve your certification.

STEP 2
Stage 2 audit – in-depth review

When you’re ready, our auditor will complete a full audit to establish whether your management systems and processes meet the standard’s requirements. A critical part of your Stage 2 audit will be reviewing real examples of the delivery of your products and services.

STEP 3
Auditor’s recommendations

You’ll be advised of the Auditor’s recommendations on the day, which our compliance department will ratify, and your certification will be issued following the decision, subject to compliance with the standard.

STEP 4
SUCCESS! Certification issued

We’ll help you keep up to date. ISO certification’s excellent reputation is driven by its requirement for ongoing audits and continual improvement, so we’ll keep in touch and arrange annual audits to keep your certification up to date.

What Is Assessed During Certification? 

Our impartial, expert auditors will assess how well your BCMS meets the ISO 22301 standard. 

They will review aspects such as: 

  • How critical operations and risks are identified 
  • Business continuity objectives and recovery plans 
  • Roles, responsibilities, and leadership involvement 
  • Testing, exercises, and evidence of learning 
  • Documented procedures and performance data 
  • Ongoing improvement and readiness efforts 

Audits are fair, structured, and focused on assessing your conformity with ISO 22301.  

How Much Does ISO 22301 Certification Cost? 

Costs in the UK depend on: 

  • The size of your organisation 
  • The number of locations 
  • The nature and complexity of your operations 
  • The scope of your BCMS 

British Assessment Bureau offers clear, transparent pricing and flexible payment options to support your budget. 

understanding iso 22031

Why You Should Choose British Assessment Bureau

Our experts are with you at every step of your certification journey.
  • UKAS-accredited certification services: If your certificate meets our accredited scope, it will display the Crown & Tick mark, showing it meets UK accreditation rules.
  • Experienced auditors and support teams: Experts in business continuity and ISO certification 
  • Dedicated guidance: Our Client Success Team supports you through every step 
  • High satisfaction scores: Rated “Exceptional” on Feefo for over ten years 
  • Flexible payments: Choose monthly or upfront options 
Why you should choose British Assessment Bureau

What Happens After Certification? 

Certification is the start of your continuity journey. After you achieve ISO 22301, if you meet our accredited scope: 

  • You’ll receive a UKAS-accredited certificate 
  • You’ll have regular audits (usually once a year) to maintain certification 
  • Your BCMS will continue to improve over time 
  • You can expand into other standards (like ISO 27001 or ISO 9001) with less duplication 

ISO 22301 Implementation Training

We offer training to help you understand ISO 22301:2019 and how it applies to your organisation. This helps with BCMS planning and internal readiness. 

Training overview: 

  • Introduction to ISO 22301 and Business Continuity Management 
  • Understanding risk, recovery, and business impact analysis 
  • Overview of the ISO 22301 clause structure 
  • The PDCA cycle and continual improvement 
  • How to prepare for internal and external certification audits 

Our ISO 22301 support services

Discover the ISO 22301 standard

Learn more about ISO 22301:2019 and improve your Business Continuity Management System with our expert insights.

ISO 22301 training courses

Improve your business continuity and resilience with our comprehensive ISO 23301 training courses.

ISO 22301 requirements

Understand the key requirements for achieving ISO 22301 certification for your BCMS.

ISO 22301 Certification FAQs

Sign Up to Our Newsletter

Enter your details below to stay up to date with all the latest certification news and expert insights.

Related Standards

ISO 9001

Monitor and manage quality. Streamline your operations. Reduce your costs.

ISO 14001

ISO 14001 is a globally recognised standard for Environmental Management Systems, helping organisations improve sustainability & reduce environmental impact.

ISO 27001

Discover ISO 27001, the global standard for information security management, safeguarding data integrity, confidentiality, and availability.

ISO 45001

Discover ISO 45001, the international standard for Occupational Health and Safety Management Systems. Learn how ISO 45001 helps businesses improve safety.

ISO 42001

Learn about ISO 42001, the first international standard outlining the requirements for Artificial Intelligence Management Systems (AIMS).

Cyber Essentials

Cyber Essentials is a UK scheme for cyber security, helping organisations improve their cyber security framework.

PAS 2030

Read about PAS 2030 and discover why it's important to implement quality practices for energy efficiency installations.