ISO 22301 - Business Continuity Management Systems

- Exercise programme -

Implement and maintain a programme of exercising and

testing meant to validate the effectiveness of BC strategies
and solutions.

Objectives for the programme of exercises:

- to confirm people understand their roles in case of an incident
- to check if technical systems work as intended
- to confirm that the company can operate from an alternative location
- to verify if the RTOs are achievable
-…
ISO 22301 - Business Continuity Management Systems
- Exercise programme -

Discussion-based exercises Operations-based exercises

No specific frequency – at planned intervals and

whenever there are significant changes.

Post-exercise reports shall be produced with

recommendations and improvements.

ISO 22398 – Guidelines for Exercises