ISO 22301 - Business Continuity Management Systems

- Incident Response Structure -

Implement and maintain an Incident Response Structure (IRS) that is

responsible to provide an effective response in case of an incident

Assessment Activation Action

- Assess the nature and - Initiate the response – - Establish priorities
extent of the disruption activate plans, mobilize - Monitor the effects of the
and its potential impact teams, make resources disruption
- Measure potential available - Command and control the
impacts against response
thresholds to determine if - Communicate with
IRS a formal response is to be interested parties
initiated
ISO 22301 - Business Continuity Management Systems
- Incident Response Structure -

The Incident Response Structure may

include one or several teams (e.g.
emergency team, IT&C recovery team,
facility management team, security
team…)

Each position should have a backup