Two gap analysis checklists for business continuity, a full review against ISO 22301 and a shorter one that follows the IMS1 manual sections.
These checklists are supplied in fully editable MS Word format and can be easily customised and edited. The documents use pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:
- Checklist name and title
- Information-classification
- Version
- Page number / total pages
alphaZ documents - beautifully designed, tried and tested checklists. No junk, jargon or unnecessary content. Simple and usable checklists
developed over 25 years through practical use in the real world.
Further guidance on gap analysis and business continuity:
Download these checklists with your company name and logo already added!
Document Preparation available with all document toolkits.
To get access to these files please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. These checklists are also included in the ISO 22301 Toolkit and the integrated toolkits that include it, so the toolkit route gives you these files plus everything else you need in one download.
If you'd like hands-on help with a gap analysis or setting up your ISO 22301 business continuity management system, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.
Business Continuity Gap Analysis Checklists
The I-C Gap Analysis Checklists - BCMS are two Word checklists for reviewing a business continuity management system (BCMS) against ISO 22301, either before you start, to see what is already in place, or once the system is built, to check it is ready for internal and external audits. Each has space for who prepared it and when, general comments, and a column to record the gaps found against each item.
The full checklist works through the requirements of ISO 22301:2019 from context to continual improvement. The shorter IMS checklist looks at the business continuity arrangements themselves and follows the sections of the IMS1 manual, so it suits a business adding ISO 22301 to an existing integrated management system.
Two Checklists in One Download
- I-C Gap Analysis - BCMS - the full review, with questions on each part of ISO 22301 from internal and external issues to continual improvement
- I-C IMS Gap Analysis - BCMS - a short version focused on business continuity arrangements and following the IMS1 manual. It does not cover common requirements such as internal audit and management review
What the Full Checklist Covers
- Context - internal and external issues, interested parties, legal requirements for the continuity of products and services, and the scope of the BCMS
- Leadership and planning - the business continuity policy, the Business Continuity Lead and other responsibilities, and objectives that take account of the minimum acceptable level of products and services
- Support - resources, competence, awareness, communication and documented information
- Operation - operational planning and control, risk assessment and business impact analysis, business continuity strategies and solutions, plans and procedures, and the exercise programme
- Performance and improvement - internal audit, management review, nonconformity and corrective action, and continual improvement
What the IMS Checklist Covers
It checks that the IMS1 manual reflects the BCMS in sections 1.2 overview and scope, 1.3 context, 1.6 legal compliance, 2.2 responsibilities and 2.5 risk management, then reviews the business continuity objectives, the interested parties register, the business continuity policy, the business continuity register and plans, communication, supplier continuity, and monitoring and testing.
Who Needs a BCMS Gap Analysis?
Organisations working towards ISO 22301 certification, or adding business continuity to an existing management system, that want a clear picture of what is in place and what still needs doing. It also works as a readiness check before an internal audit or the certification audit.
Included in the ISO 22301 Toolkit
These checklists are part of the ISO 22301 Toolkit and the integrated toolkits that include it.
Using the Checklists
Work through the checklist that suits your system, recording the gaps found against each item, then turn the gaps into actions with an owner and a date. Repeat the review once the actions are complete to confirm the system is ready.
Related Documents
The gaps usually lead to the ER16 Business Continuity Risk Register, PP-1-05 Business Continuity Policy Procedure, F-IMS21 Business Continuity Register and F-IMS22 Interested Parties Register. The ISO 22301:2019 Requirements Checklist follows the clauses of the standard, and the I-C-IMS Gap Analysis Checklists cover the other ISO standards.
Would you rather we prepared it for you?
Our IMS Manual and Registers Preparation service writes your management system manual around your business and completes the registers behind it, so the arrangements your staff are briefed on match what is written down.
IMS Manual and Registers Preparation