General / Cross-sector 18 items
Business Continuity Plan Readiness (ISO 22301)
Assesses the maturity of a business continuity management system including impact analysis, plans, and testing.
ISO 22301
Free PDF · enter your email to download.
Program Governance
- Is the scope of the business continuity management system (BCMS) defined? *
- Has leadership assigned roles, responsibilities, and a business continuity policy? *
- Are continuity objectives established and resourced? *
Business Impact Analysis & Risk
- Has a business impact analysis (BIA) identified prioritized activities? *
- Are recovery time objectives (RTO) defined for critical activities? *
- Are recovery point objectives (RPO) defined for critical data? *
- Has a risk assessment identified threats to prioritized activities? *
Continuity Strategies & Resources
- Are continuity strategies selected to meet the RTOs (alternate sites, redundancy, workarounds)? *
- Are resource requirements identified (people, facilities, technology, suppliers)? *
- Are critical suppliers and dependencies documented with contingencies? *
Plans & Communications
- Are documented business continuity plans and procedures in place? *
- Is there an incident response structure with activation criteria and authority? *
- Are internal and external communication procedures (including stakeholders) defined? *
- Are current call trees and contact lists maintained? *
Exercising & Improvement
- Are continuity plans exercised and tested on a defined schedule? *
- Date of most recent BCP exercise: *
- Are exercise results and post-incident findings used to improve the BCMS? *
- Reviewer sign-off: *
Download the full Business Continuity Plan Readiness (ISO 22301) checklist
Get it as a clean, printable PDF — free.