Перейти к основному содержанию
Virtual workshop
22 – 26 ноября 2020  Мероприятие завершено

Business continuity management systems

ISO has published the requirements standard ISO 22301:2019 with guidance in the form of the supporting standard ISO 22313:2020. These standards enable any organization to implement and maintain a business continuity management system that increases its level of preparedness to continue to operate during disruptions regardless of their nature or cause. But what questions should an organisation be asking and how do these standards provide the answers?

This unique ISO-ITC joint workshop provides the questions that an organisation should be asking at each stage of the process and, with clear references to the standards, provides the answers.


Target audience

The workshop will target a total of 25-30 participants nominated by the ISO members and ITC from the Central and Western Africa region. 

  • When

    23-27 November 2020, 10:00-14:00 CET

  • Where

    Virtual workshop

  • Language

    English with simultaneous interpretation into French

  • who
  • ISO members from Central and Western Africa.

Registration closed 


The workshop will take place over five days with plenty of opportunity for group exercises, group discussions and individual working to increase participant learning and enjoyment.

The sessions explain the fundamentals of business continuity management and the benefits of using a management system approach. By the end of the workshop, participants will have an excellent understanding of the principles of ISO 22301:2019 and be equipped to apply that understanding to the organisations that they work with.

A unique feature of the workshop is that each session starts with the questions that participants should be asking and then provides the answers using combinations of short presentations, group working, group discussion, quizzes and individual working, all using the latest virtual workshopping techniques. There will also be a final test for participants to demonstrate their understanding and each participant will receive a course certificate.

The sessions and the questions to be answered are as follows:

A. Definitions and concepts

A.1 What is business continuity?

  •  What do different terms mean?
  •  What are we trying to achieve?
  •  How does business continuity deal with pandemics?
  •  What does a management system offer?
  •  Why use a management system for business continuity?

B. Establish the management system

B.1 What issues does our organization face?

  •  What are relevant internal and external factors?
  •  What do our stakeholders expect?
  •  What boundaries do we need to set?

b.2 Who will take the lead?

  •  What will management do?
  •  How can we explain top management’s intentions?
  •  Who will do what?

B.3 What do we need to plan?

  •  What are the risks and opportunities?
  •  What objectives should we set?
  •  How will we control changes to the management system?

B.4 What are we going to need?

  •  What resources will we need? 
  •  What skills and knowledge must people have?
  •  How do we get everyone on board?
  •  What are we going to tell them?
  •  What records are we going to need to keep?

C. Business continuity management

c.1 What is business continuity management?

  • What is business continuity management?

C.2 What needs to be assessed?

  • Which activities will need to be prioritized during a disruption?
  • Can we prevent disruptions?

C.3 How can we protect and recover our priority activities?

  •   What strategies and solutions might be appropriate?
  • How should we choose strategies and solutions?
  • What resources will be needed?

C.4 What needs to be in place?

  • What team structure is needed?
  • How will we know what is happening?
  • What documentation is needed?
  • What should the documents contain?

C.5 What do we need to do during an incident?

  • How should we respond initially?
  • How can we stay on track?
  • With whom should we communicate?
  • How do we keep people safe and maintain morale?
  • How can we maintain security and use what we already have?
  • How do we keep our priority activities going?
  • How will we maintain our essential it support systems?

C.6 How can we increase confidence?

  • How can we check our business continuity?
  • How do we know our plans will work?

D. Monitor and review the management system

D.1 How do we evaluate our performance?

  • How should we monitor our progress?
  • Who can give us an independent view?
  • What can management tell us?

E. Maintain and improve the management system

E.1 How do we keep improving?

  • What's going wrong and how do we fix it?
  • How can we become even more effective?


Malcolm Cornish has specialised in business continuity management for more than thirty years, working in industry and as an independent consultant.

He has been a member of CAR/1, the BSI committee responsible for British and International standards in continuity and resilience, since its inception in 2005. Malcolm is also a member of ISO Committee TC 292 (Security and resilience) and was actively involved in the development of ISO 22301:2012 and ISO 22301:2019. As Project Leader for Working Group 2, Malcolm led the development of ISO 22313:2012 and ISO 22313:2020, the guidance standard for ISO 22301.

Malcolm Cornish
Malcolm Cornish
ISO Expert on Business Continuity Management


Al-Khammash Nesreen
Nesreen Al-Khammash
Programme Manager