Skip to content
ISO GRC Advisory

ISO 22301:2019

ISO 22301Business Continuity Management System (BCMS) in the UAE & Saudi Arabia

Prepare for disruption before it happens: business impact analysis, recovery strategies, tested plans and a management system that keeps them current.

Certifiable by an accredited certification body

Typically needed by

  • ✓Banks, insurers, utilities, telecoms and government entities
  • ✓Service providers with contractual uptime or recovery commitments
  • ✓Organisations that have plans on paper but have never exercised them

Scope your ISO 22301 project

We’ll get back to you about the next step.

Your details

Email or mobile — at least one is required.

Country

Saudi Arabia

Supports business continuity expectations in sector regulation such as SAMA’s requirements for financial institutions and national resilience programmes.

United Arab Emirates

Closely related to the national business continuity standard (NCEMA 7000) applied across many UAE government and critical entities.

What the engagement looks like

  1. 01

    Gap assessment and scope definition

  2. 02

    Policies, processes and documented information

  3. 03

    Implementation support and awareness training

  4. 04

    Internal audit and management review

  5. 05

    Certification audit preparation with your chosen accredited certification body

Timelines depend on size, sites and existing documentation — you get a realistic plan after scoping, not a one-size promise.

ISO 22301 training

Commonly needed in: Riyadh, Dubai, Abu Dhabi

ISO 22301 questions

Who issues the ISO 22301 certificate?+

An independent certification body accredited for ISO 22301. Preparation, training and advisory are deliberately kept separate from certification so the audit stays impartial.

Can our team be trained on ISO 22301?+

Yes — options include ISO 22301 Foundation, ISO 22301 Internal Auditor, ISO 22301 Lead Auditor, Business Impact Analysis (BIA) Workshop, Advanced Business Continuity & Disaster Recovery. Public, virtual and in-house formats can be arranged; ask for current dates and fees.

What is a Business Impact Analysis?+

A BIA identifies your critical activities, how quickly each must recover and what it depends on. It is the foundation every continuity strategy and plan is built on.

Next step

Start with a ISO 22301 readiness review

Seven questions, two minutes — see where you stand before the first call.

Take the readiness check
CallWhatsAppGet a quote