4. Conclusion

What does the future hold for ISO 22301? We need to define the scope of business continuity on the basis of the crisis lifecycle, and integrate a single, comprehensive approach to risk management, crisis management and continuity management. Emphasis must be placed on a real risk analysis and a Business Impact Analysis (process approach). What activities are critical, and what are the maximum acceptable downtimes? It will be important to establish evaluation criteria and appropriate risk analysis methods. As we saw in the article, business continuity is closely related to organizational resilience, i.e. how to cope with the unexpected. In the same way, it would be better to develop the issues involved in business resumption scenarios, and to develop appropriate responses to different types of crisis and corporate structure. In this article, we have discussed the need to integrate, in addition...