ISO 22301:2019

ISO 22301 Business Continuity Management

Keep your business running through disruption such as loadshedding, supply-chain failure, fire or a cyber incident, with a certifiable Business Continuity Management System.

ISO 22301 is the international standard for Business Continuity Management Systems (BCMS), a certifiable framework for preparing for, responding to, and recovering from disruptive incidents, so critical business functions keep operating (or recover quickly) whatever goes wrong.

For South African businesses, that means building resilience against very real local disruption risks: loadshedding and grid instability, water outages, supply-chain interruption, extreme weather, fire, and cyber incidents, beyond the generic disaster-recovery scenarios in an off-the-shelf template.

Andreas Burger Consulting builds business continuity plans around a proper Business Impact Analysis (BIA) of your specific operations, so the plan reflects what would happen to your business, and what it would take to keep running.

After certification: continuity plans are SOPs and recovery actions are work orders, and both must be current when you need them. DynamicERMS, built by our technology partner Dynatek, keeps your SOPs, work orders and documentation ready.

Why it matters

Key benefits

Reduces downtime and financial loss when disruption occurs

Meets ISO 22301 requirements increasingly required by corporate clients and insurers

Builds resilience against South Africa-specific risks like loadshedding and supply disruption

Gives leadership a tested, rehearsed response plan rather than an improvised one

Protects customer relationships and reputation during an incident

Integrates with ISO 31000 risk management and ISO 27001 information security

How we work

Our implementation process

Business Impact Analysis (BIA)

We identify your critical functions, dependencies, and the maximum tolerable downtime for each.

Risk & Threat Assessment

We assess the disruption scenarios most likely to affect your business, from loadshedding to supply failure to cyber incidents.

Continuity Strategy & Plans

We develop recovery strategies and documented continuity plans for your priority functions.

Testing & Exercising

We run exercises to test the plan against realistic scenarios and identify gaps before a real incident does.

Internal Audit & Certification Support

We run your internal audit and support you through the certification body's audit process.

FAQ

Common questions about ISO 22301 Business Continuity Management

Those are useful controls, but ISO 22301 requires a full management system: a business impact analysis, defined recovery time objectives, tested plans, trained response teams, and continual review, not just individual technical safeguards.

Loadshedding is treated as one of the disruption scenarios assessed in your risk and business impact analysis. We help you define acceptable downtime, backup power/connectivity strategies, and operational workarounds specific to your business's actual power dependency.

ISO 22301 explicitly requires exercising and testing. A plan that's only ever been written, never rehearsed, tends to fail exactly when it's needed. We build a realistic testing programme as part of the implementation.

No. ABC is not a Certification Body and does not issue certificates. We implement and prepare you for audit; independent accredited bodies certify. That separation, required under ISO/IEC 17021-1, protects the integrity of your certificate.

Ready to get started with ISO 22301 Business Continuity Management?

Book a consultation and we'll scope exactly what your business needs.

Book a Business Continuity Consultation
Scroll to Top