Leadership for ISO 22301 Business Continuity

ISO 22301 Clause 5 - Leadership

Clause 5 sets out what top management has to do to make the BCMS work. The requirements are not just symbolic - they include establishing the policy, ensuring resources are available, integrating the BCMS into business processes, communicating the importance of business continuity, and making sure the right roles and responsibilities are assigned. Without active leadership the rest of the standard cannot be met.

Sub-clauses of ISO 22301 Clause 5

Clause 5.1 Leadership and Commitment 

Clause 5.1 - Leadership and Commitment sets out the specific actions top management must take to demonstrate leadership and commitment to the BCMS. These include establishing policy and objectives, integrating BCMS requirements into business processes, ensuring resources, communicating the importance of business continuity, and supporting people to contribute to the effectiveness of the system. There is no separate documented information requirement, so this clause is typically evidenced through the artefacts produced under Clauses 5.2 and 5.3.

Clause 5.2 - Policy requires top management to establish a documented business continuity policy that is appropriate to the organisation, provides a framework for setting objectives, and includes commitments to satisfy applicable requirements and to continually improve the BCMS. The policy must be communicated within the organisation and made available to interested parties as appropriate.

Clause 5.3 - Roles, Responsibilities and Authorities requires top management to assign and communicate the responsibilities and authorities for ensuring the BCMS conforms to the standard and for reporting on its performance.