Industry Standards & Frameworks

International standard for Business Continuity Management Systems (BCMS). Specifies requirements for planning, establishing, implementing, operating, monitoring, reviewing, maintaining, and continually improving a documented management system.

International standard for Information Security Management Systems (ISMS). Provides requirements for establishing, implementing, maintaining, and continually improving information security within an organization.

Voluntary framework providing guidance for managing cybersecurity risk. Organized around six core functions: Govern, Identify, Protect, Detect, Respond, and Recover.

EU regulation on digital operational resilience for the financial sector. Requires financial entities to ensure they can withstand, respond to, and recover from ICT-related disruptions.

International standard providing principles, framework, and process for managing risk. Applicable to any organization regardless of size, activity, or sector.

Guidance document for ISO 22301 implementation. Provides recommendations and practical advice for establishing, implementing, and maintaining a BCMS.

Industry best practice guide from the Business Continuity Institute. Covers six professional practices providing a comprehensive lifecycle approach to BCM.

UK regulatory framework requiring financial firms to identify important business services, set impact tolerances, and ensure they can remain within those tolerances through severe but plausible disruption scenarios.