Certification planner / ISO 22301

How do you get ISO 22301 certification?

Business continuity management system: business impact analysis, disruption scenarios and recovery plans. Answer the questions, and we'll map out the stages, timeline and documents you need to prepare for your business, with the reasoning behind each one.

4–9 monthstypical preparation time 37documents in the library 7stage

Your personal roadmap

Free · no sign-up required · about 2 minutes

Describe your main products and services, your customers and how you work in a few sentences.
E.g. metal processing, software, logistics, food production, consulting
Office, factory, warehouse, construction site — all addresses to be included in the certification scope.
Accreditation bodies and legal requirements vary by country.

Your answers are processed with AI solely to prepare your roadmap.

ISO 22301 certification steps

  1. Scope and gap analysisDefine the certification scope and locations, and identify the gaps between your current practices and the standard.
  2. Leadership, policy and objectivesTop management commitment, policy, roles and measurable objectives.
  3. Risks and standard-specific analysesRisks and opportunities; depending on the standard, environmental aspects, information security risks or business impact analysis.
  4. DocumentationPrepare, approve and publish procedures, work instructions, forms and lists tailored to your business.
  5. Implementation and recordsOperate the system; build up records such as training, calibration, suppliers and corrective actions.
  6. Internal audit and management reviewAudit the system yourself, close the findings and conduct the management review.
  7. Certification auditStage 1 (documentation) and Stage 2 (implementation) audits by an accredited body, followed by the certificate.

Documents required for ISO 22301

The mandatory set from the KaliteGO library. Each one is generated as docx/xlsx, filled in with your company details.

  • DD.1Context Document
  • DD.2Scope and Boundaries Document
  • DD.4Leadership Management Document
  • FR.1Context (Internal and External Issues) Form
  • FR.21Business Continuity Team and Responsibilities Form
  • FR.22Business Continuity Exercise Report Form
  • FR.30Training Attendance and Evaluation Form
  • FR.4Meeting Minutes Form
  • FR.5Internal Audit Report
  • FR.6Goal and Objective Tracking Form
  • FR.71Business Continuity Strategy and Solution Selection Form
  • FR.8Corrective Action Form
  • FR.9Performance Monitoring and Tracking Form.
  • LS.1Current Documents and Revision Tracking List
  • LS.14Legal and Other Requirements List
  • LS.2Interested Parties and Stakeholder Analysis List.
  • LS.25Post-Incident Evaluation (After-Action Review) Report
  • LS.5External Communication List
  • LS.6Internal Communication List
  • LS.7Corrective Action Tracking List
  • PL.1Internal Audit Plan
  • PL.13Business Continuity Plan (BCP)
  • PL.4Backup Plan
  • PL.6Business Continuity Impact Analysis Plan
  • PL.7Business Continuity Exercise Plan
  • PO.33Business Continuity Policy
  • PR.1Control of Documented Information and Records Procedure
  • PR.14Training and Awareness Management Procedure
  • PR.18Information Security Business Continuity Procedure
  • PR.2Risk and Opportunity Management Procedure
  • PR.4Communication Management Procedure
  • PR.6Internal Audit Procedure
  • PR.61Business Impact Analysis (BIA) and Disruption Risk Assessment Procedure
  • PR.7Management Review Procedure.
  • PR.8Improvement, Nonconformity and Corrective Action Procedure
  • TL.6Emergency, Crisis Management and Business Recovery Work Instruction
  • ŞM.01Organization Chart

Frequently asked questions

How long does ISO 22301 certification take?

For most SMEs, 4–9 months. The timeline depends on your headcount, locations and current practices. The system needs to run long enough to generate records (usually 2–3 months), followed by an internal audit, a management review and the certification body's Stage 1 and Stage 2 audits.

Which documents are required for ISO 22301?

The standard explicitly requires certain documented information: scope, policy, objectives, procedures and records. The KaliteGO library has 37 document templates for ISO 22301; the planner explains which of them your business needs, and why.

Does KaliteGO issue the certificate?

No. The certificate is issued by an accredited certification body following the audit. KaliteGO gets you ready for the audit: documents, records, internal audit and management review.

Can I prepare without a consultant?

Yes. Most small and medium-sized businesses can prepare with a guided roadmap and ready-made templates. Consultants also use KaliteGO to manage multiple clients.