Certification shows your customers, regulators and partners that your business continuity management system has been audited by an independent body and meets ISO 22301:2019. ITA audits your system on site and reports what it finds objectively.
What the audit looks at
- Business impact analysis and risk assessment
- Business continuity strategies, plans and procedures
- Exercising and testing of the plans
- Monitoring, internal audit, management review and improvement
Who it is for
- Banks, utilities, telecoms and logistics providers
- Suppliers of critical services to government and large companies
- Organisations that must show resilience to regulators and customers
The certification process
- Application — you tell us the scope, sites, number of employees and main processes.
- Proposal — we confirm the audit time, the audit team and the fee in a written proposal.
- Stage 1 audit — we review your documented system and your readiness, and agree the plan for stage 2.
- Stage 2 audit — auditors evaluate on site how the system is implemented and how effective it is.
- Decision — once any nonconformities are closed, the certification decision is made by people who did not take part in the audit.
- Surveillance — surveillance audits during the certificate cycle, then a recertification audit before the certificate expires.
What we need to prepare your proposal
- The scope you want certified (activities, products or services)
- Number and location of sites
- Number of employees and shifts
- Any certificates you already hold and the date you would like to be audited
Impartiality: certification audits are carried out and decided independently of ITA’s consultancy and training activities. We do not certify a management system that ITA helped to design or implement.
Frequently asked questions
How long does certification take?
It depends on how ready your system is and on the size of your organisation. The audit time is calculated from your number of employees, sites and the complexity of your activities, and is stated in our proposal.
How much does it cost?
The fee follows the audit time, so it differs from one organisation to another. Send the certification request form and we will send a written proposal.
Is the certificate accredited?
The accreditation status that applies to your standard and scope is stated in our written proposal, so you know it before you sign.
Can ITA help us prepare for the audit?
Not the certification team. To stay impartial, auditors do not advise on how to build the system they audit. Your team can attend our public ISO 22301:2019 training courses.
What happens if the auditors find nonconformities?
You receive a written report. You then send your correction and corrective action, with evidence, within the agreed time before the certification decision is made.
Related training
Build audit competence in your team with the ISO 22301:2019 Lead Auditor Course (BCMS), or see all certification services.