ISO 22301

Risk Management Certification

Companies may be subject to a range of operational delays and supply chain disruptions. By implementing and certifying a Business Continuity Management System, organizations can swiftly recover from incidents without compromising their long-term security.

When facing major events or incidents, build resilience and make sure you are equipped to continue operating.

build resilience and make sure you are equipped to continue operating

Operational delays take many forms – Cyberattacks, IT breakdowns, flooding, fire, major supply chain issues, pandemic, utility disruptions, IT outages, extreme weather – and are a risk for all businesses. To recover from these incidents, organizations require a comprehensive strategy that tackles numerous business continuity risks.
ISO 22301 is a Business Continuity Management System that accounts for your company’s complete ecosystem. With ISO 22301, companies can identify areas of risk, implement controls and allocate responsibilities appropriately. By certifying your business to ISO 22301, you can reassure both internal and external parties of your company’s ability to recover from unexpected disruptions.

Benefits of becoming certified

An ISO 22301 compliant business continuity management system generally gives a clear and detailed view of how an organization operates. It offers valuable insight useful for strategic planning, risk management, supply chain management, business transformation and resource management.

Other benefits are:

  • better understanding of critical issues and vulnerable areas;
  • enhanced organizational resilience through cross-team collaboration;
  • reduced costs and less impact on business performance in case of disruptive incidents;
  • cost benefits from reduced insurance premiums;
  • consistent approach throughout the organization;
  • demonstration to customers, suppliers and regulators that business continuity systems and processes are in place.


ISO 22301 helps organizations plan for and recover from business disruptions. By establishing procedures and controls through ISO 22301 implementation and certification, companies can mitigate time and money lost in the event of an operational delay.
Certification to ISO 22301reassures stakeholders, investors, clients and employees of your company’s preparedness. By certifying to ISO 22301, which includes personnel training, internal audits and management reviews, your company can demonstrate resilience to both internal and external parties.

Global recognition as a reputable supplier

Certification is recognized internationally and accepted throughout industry supply chains, setting industry benchmarks for sourcing suppliers.

Win more business

Procurement specifications often require certification as a condition to supply, so certification and verification opens doors

Business resilience

Avoid downtime and financial losses with effective management of risk, emergency preparedness and contingency planning.

Legal Compliance

Understand how statutory and regulatory requirements impact your organization and its customers.

What is ISO 22301 ?

ISO 22301 is relevant for any organization, large or small, operating within any industry sector. The pandemic emphasized how everyone can be impacted. However, it may be particularly relevant for companies in high risk environments like utilities, financial services, oil and gas, transportation, telecom and food & beverage production. The same goes for organizations where continued operation is critical, like in the public sector.


Step 1

Complete a Quote Request Form so that we can understand your company and requirements. You can do this by completing either the online quick quote or the online formal quote request form. We will use this information to accurately define your scope of assessment and provide you with a proposal for certification.


Step 2

Once you’ve agreed your proposal, we will contact you to book your assessment with an WECERT Assessor. This assessment consists of two mandatory visits that form the Initial Certification Audit. Please note that you must be able to demonstrate that your management system has been fully operational for a minimum of three months and has been subject to a management review and full cycle of internal audits.


Step 3

Following a successful two stage audit, a certification decision is made and if positive, then certification to the required standard is issued by WECERT. You will receive both a hard and soft copy of the certificate. Certification is valid for three years and is maintained through a programme of annual surveillance audits and a three yearly recertification audit.