ISO 22301:2019 is the international standard for business continuity management systems (BCMS). It specifies the requirements for establishing, implementing, maintaining, and improving a BCMS that enables an organization to prepare for, respond to, and recover from disruptive incidents. ISO 22301:2019 consists of 13 sections and 2 supporting sections. The 13 sections are:

Scope: This section defines the scope and applicability of the standard and its intended outcomes.

Normative references: This section lists the normative references that are indispensable for the application of the standard, such as ISO 31000 and ISO/IEC 27000.

Terms and definitions: This section provides the definitions of the terms used in the standard, such as business continuity, incident, and risk.

Context of the organization: This section requires the organization to determine its internal and external issues, the needs and expectations of its interested parties, and the scope and boundaries of its BCMS.

Leadership: This section requires the top management to demonstrate leadership and commitment, establish the business continuity policy and objectives, assign roles and responsibilities, and support the BCMS.

Planning: This section requires the organization to plan actions to address risks and opportunities, achieve the business continuity objectives, and integrate the BCMS into its business processes.

Support: This section requires the organization to provide the necessary resources, competence, awareness, communication, and documented information to support the BCMS.

Operation: This section requires the organization to implement the operational planning and control, conduct the business impact analysis and risk assessment, determine the business continuity strategy and solutions, establish and implement the business continuity procedures, and exercise and test the BCMS.

Performance evaluation: This section requires the organization to monitor, measure, analyze, and evaluate the performance and effectiveness of the BCMS, conduct internal audits, and review the BCMS at planned intervals.

Improvement: This section requires the organization to identify and implement opportunities for improvement, address nonconformities and take corrective actions, and continually improve the BCMS.

Annex A: This section provides informative guidance on the relationship between the clauses of ISO 22301:2019 and ISO 22313:2020, which is the international standard for business continuity management systems - guidance on the use of ISO 22301.

Annex B: This section provides informative guidance on the relationship between the clauses of ISO 22301:2019 and ISO 31000: