Performance evaluation

organization. Don’t accept the contents without reading them and thinking about whether they meet your needs – does the document say what you want it to say, or do you need to change various aspects to make it match the way you do things? This is particularly relevant for policies and processes where there is no “right” answer. The function of the document content is help you to assess what’s right for you so use due care when considering it. Where the content is very likely to need to be amended, we have highlighted these sections but be aware that other non-highlighted sections may also need to be updated for your organization.

1.3 If yours is a small organization

The CertiKit ISO22301 Toolkit has been deliberately designed to be flexible and easy to adapt to your needs. The standard itself doesn’t dictate any specific structure of documentation so you’re free to do whatever makes sense for you as long as the requirements are met. Some smaller organizations decide to merge some of the supplied documents together so that the total number of documents in the BCMS is reduced. This makes sense if the number of people involved is small and approval cycles are short. To help with this process, you may like to consider the following suggestions for documents that could be merged together:

A Business Continuity Manual could also incorporate:

• Roles Responsibilities and Authorities • Procedure for the Control of Documented Information • Procedure for Internal Audits • Procedure for Management Reviews • Procedure for the Management of Nonconformity

It’s up to each small organization to decide if this approach would be right for them; inevitably there are pros and cons of having more or fewer documents and some form of compromise solution based on our suggestions might also be appropriate.

1.4 Where to start

Relevant Toolkit documents:

• ISO22301 Toolkit Index • ISO22301 Gap Assessment Tool • ISO22301 Assessment Evidence • ISO22301 Benefits Presentation • Certification Readiness Checklist • ISO22301 In Simple English