The goal of Business Continuity Management (BCM) is to provide the organization with the ability to effectively respond to threats such as natural disasters or data breaches and protect the business interests of the organization. BCM includes disaster recovery, business recovery, crisis management, incident management, emergency management and contingency planning.

 

According to ISO 22301, a business continuity management system emphasizes the importance of:

​

• Understanding continuity and preparedness needs, as well as the necessity for establishing business continuity management policy and objectives.

• Implementing and operating controls and measures for managing an organization’s overall continuity risks.

• Monitoring and reviewing the performance and effectiveness of the business continuity management system.

• Continual improvement based on objective measurements.