This manual combines a quality management system with a business continuity management system, linking the continuity policy, register and risk register to the processes they protect.

Effective IMS Manuals

The IMS1 manual is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

• Manual reference and title
• Information-classification
• Version
• Page number / total pages

alphaZ documents - beautifully designed, tried and tested management system documents. No junk, jargon or unnecessary content. Simple and usable documents developed over 25 years through practical use in the real world.

Further Reading

Further guidance on business continuity:

• Business Continuity Risk and Impact Analysis
• ISO 22301 Clause 8.4 - Business Continuity Plans and Procedures
• ISO 22301 Clause 8.5 - Exercise Programme
• ISO 22301 knowledge base

How to Download

This manual is supplied within the ISO 9001 and 22301 Toolkit - click through to the toolkit for details. Every alphaZ ISO toolkit includes the IMS1 manual written for the standards it covers.

Need Help Implementing?

If you'd like hands-on help building business continuity into your quality manual, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

ISO 9001 / 22301 Integrated Management System Manual

This version of the IMS1 Integrated Management System Manual covers ISO 9001:2026 and ISO 22301:2019. Business continuity does not have a section of its own - it is built into Sections 1 and 2, where a BCMS statement in 1.2 sets out what makes up the business continuity management system, and 2.5.6 sets out how continuity is managed, exercised and reviewed.

The detail sits in the documents the manual names: P-34 Business Continuity Policy Statement, PP-1-05 Business Continuity Policy, F-IMS21 Business Continuity Register and the business continuity risk register. The quality processes in Sections 1 to 5 run alongside, so continuity planning, risk review and management review all use the same framework.

What the Manual Covers

• Section 1 Integrated Management System - company profile and scope with the BCMS statement, which lists any parts of the company or products and services left out, context, processes, documented information including data backup, and legal compliance with ISO 22301 listed as a relevant standard
• Section 2 Leadership, Commitment and Planning - P-1 Quality Policy and P-34 Business Continuity Policy Statement, business continuity objectives, a Business Continuity Lead alongside the IMS Lead, management review, and risks and opportunities
• 2.5.6 Business Continuity - business impact analysis and risk assessment, continuity strategies, plans and procedures, exercising and testing, and evaluation of documentation and capabilities, with the registers reviewed at management review and after any exercise or disruptive incident
• Section 3 Resource Management and Support - staff, competence, equipment, premises and communication, including contingency communication with customers about any disruption to supply
• Section 4 Operational Processes - enquiries and sales, purchasing and outsourced services, operations, and change, variations and design
• Section 5 Monitoring, Evaluation and Improvement - customer satisfaction, problems and complaints, internal audits and continual improvement

Built for ISO 9001 and ISO 22301

• Business Continuity Lead responsibilities, from keeping plans up to date to making sure arrangements are exercised and tested and reporting performance to top management
• Risks to providing products and services during and after a disruption addressed on F-IMS21, with the risks of disruption recorded on the business continuity risk register
• The business continuity risk register named in the Appendix i registers key, so it can point at your own file
• Business continuity terms such as business impact analysis, disruption, exercise and recovery time objective explained in Appendix iii

Who Needs an ISO 9001 / 22301 Integrated Manual?

Businesses that need to show customers they can keep delivering through a disruption, such as suppliers to larger organisations or providers of essential services, use this manual to run ISO 22301 within their ISO 9001 system. It suits SMEs that want continuity planning to sit inside the quality system they already run rather than in a separate set of documents.

Included in the ISO 9001 and 22301 Toolkit

This manual is part of the ISO 9001 and 22301 Toolkit, where it is supplied with the IMS1 Manual Guidance and the registers, forms, policies and procedures it refers to.

Using the Manual

Complete the BCMS statement in 1.2, listing any parts of the business or products and services left out with the reason, or delete that sentence. Name the Business Continuity Lead in 2.2 and 2.3, then complete F-IMS21 and the business continuity risk register so that 2.5.6 describes what is actually in place. Yellow highlighted text marks the remaining placeholders.

Related Documents

PP-1-05 Business Continuity Policy Procedure holds the business impact analysis, strategies, plans and exercising programme that 2.5.6 refers to, and F-IMS21 Business Continuity Register summarises the continuity arrangements for key activities, including data backup. IMS1 Guidance explains each section of the manual, and F-IMS23 Opportunities and Risks Register holds the key risks and opportunities.