Home › Documentation Kits › ISO 22301:2019
Business Continuity · ISO 22301:2019

ISO 22301:2019 Documentation Toolkit

The real ISO 22301:2019 documentation set: 133 documents and four Excel tools that form a complete business continuity management system (BCMS). The Business Continuity Management System Manual meets every clause of ISO 22301:2019, and you get the business continuity policy, 18 procedures, 7 work instructions, 51 forms each with a completed worked example, and the business impact analysis, risk, KPI and strategy Excel tools, covering business impact analysis, BC risk assessment, continuity strategies and solutions, business continuity plans, incident response and recovery, warning and communication, and exercising and testing, all editable in Word and Excel, so an organisation can protect its critical activities from disruption and reach certification without hiring a consultant.

133
Documents
and tools
18
Procedures
clause-mapped
51
Forms with
filled samples
4
Validated
Excel tools
$149
✓ Within 24h secure delivery✓ Editable Word and Excel✓ Lifetime free updates
ISO 22301:2019MANUAL
Business Continuity System Manual
Clause-by-clause structure
18Clause-mapped
procedures
51Ready-to-use
forms
Written to satisfy the requirements checked byBSISGSTÜVBureau VeritasDNVIntertek
Overview

Everything you need for ISO 22301:2019, in one download

Preparing the documentation is the slowest and most confusing part of getting certified to ISO 22301:2019. You have to work out what the standard asks for, decide what to write, and turn it into a manual, procedures and records that an auditor will accept. Done from a blank page it takes months, and paying a consultant to do it can cost thousands.

The ISO 22301:2019 Documentation Toolkit gives you that whole system, already written and ready to edit. It is built by practitioners around the exact structure of the standard, so nothing an auditor expects is missing. You add your company details, adapt anything specific to your operation, and you have a complete, consistent business continuity system that is ready for audit. Every single document you receive is listed and explained further down this page, so you know precisely what you are buying before you spend anything.

What makes this set specific

Built for your real production model, not a generic template

Business impact analysis, done properly

A business impact analysis procedure, worksheet, prioritised activities and RTO register, dependency record and a dedicated Excel BIA tool, so you can identify your critical activities, set recovery time objectives and prove the analysis, exactly as ISO 22301 Clause 8.2 requires.

BC risk assessment and strategy selection

A business continuity risk assessment procedure and worksheet, a risk treatment plan, a strategy options evaluation and selection record and a solutions implementation record, so continuity strategies are chosen on evidence, not guesswork.

Ready-to-use business continuity plans

A business continuity plan template, incident and disruption log, activation and stand-down record, response team directory, recovery and return-to-normal checklist and post-incident report, with procedures for response structure, recovery and warning and communication during disruption.

Exercising and testing

An annual exercise programme, exercise plan and post-exercise report, with a procedure and a facilitation work instruction, so your plans are tested and improved before a real disruption, which is where most BCMS audits focus.

Supply-chain and outsourced continuity

A supplier and partner BC capability assessment and an outsourced process and supply-chain control register, so continuity extends beyond your own walls to the partners you depend on.

A completed example for every form

All 51 forms come with a matching sample filled form, worked around a realistic organisation, so you can see exactly how each record should look before you complete your own.

How the set is structured

133 controlled documents in 7 tiers

Each tier answers a different question and is approved at a different level, and every requirement is owned in exactly one place.

MAN1Business Continuity Management System Manual
POL1Business Continuity Policy
QP18Procedures
WI7Work instructions
QF51Forms and registers
SMP51Sample filled forms
TOOL4Validated Excel tools
The full contents

Every document in this toolkit, listed and explained

No hidden contents and no vague claims. Here is the complete document set, with a short description of what each file is for and the clause it helps you meet.

ISO 22301:2019 Toolkit

A complete document set, fully editable in Microsoft Office.

Business Continuity Management System Manual1
Business Continuity Policy1
Procedures18
Work instructions7
Forms and registers51
Sample filled forms51
Validated Excel tools4
Total documents133

MAN-01 Business Continuity Management System Manual

The top-level document of the business continuity management system. It demonstrates, clause by clause, how the organisation meets ISO 22301:2019, from context, leadership and the BC policy through planning, business impact analysis, risk assessment, continuity strategies, plans and exercising to performance evaluation and improvement, and traces each requirement to the procedure, work instruction, form, tool and record that satisfies it. This is the document an auditor opens first.

General and document controlIntroduction and organisation overviewScope, normative references, terms and definitions4. Context of the organisation5. Leadership and the BC policy6. Planning: risks, objectives and BC planning7. Support: resources, competence, awareness, communication, information8. Operation: BIA, risk assessment, strategies, plans and exercising9. Performance evaluation10. Improvement
POL Business Continuity Policy (1)
  • POL-01 Business Continuity Policy. Top management commitment to business continuity, aligned to ISO 22301 Clause 5.2.
QP Procedures (18)
  • QP-01 Control of Documented Information. How documented information is controlled (Clause 7.5).
  • QP-02 Context, Interested Parties, Legal and Regulatory Requirements and Scope. How context, interested parties, legal requirements and the BCMS scope are determined (Clause 4).
  • QP-03 Roles, Responsibilities, Competence, Training and Awareness. How roles, competence, training and awareness are managed (Clause 5, 7.2, 7.3).
  • QP-04 BCMS Communication. How internal and external communication is managed (Clause 7.4).
  • QP-05 Risks and Opportunities, BC Objectives and Planning. How risks and opportunities are addressed and BC objectives planned (Clause 6).
  • QP-06 Business Impact Analysis. How the business impact analysis is carried out (Clause 8.2.2).
  • QP-07 Business Continuity Risk Assessment. How business continuity risks are assessed (Clause 8.2.3).
  • QP-08 Business Continuity Strategies and Solutions. How continuity strategies and solutions are selected (Clause 8.3).
  • QP-09 Business Continuity Plans, Response Structure and Recovery. How BC plans, the response structure and recovery are established (Clause 8.4).
  • QP-10 Warning and Communication during Disruption. How warning and communication during disruption are handled (Clause 8.4.3).
  • QP-11 Exercise and Testing Programme. How exercises and tests are programmed and run (Clause 8.5).
  • QP-12 Evaluation of BC Documentation and Capabilities. How BC documentation and capabilities are evaluated (Clause 8.6).
  • QP-13 Monitoring, Measurement, Analysis and Evaluation. How BCMS performance is monitored and evaluated (Clause 9.1).
  • QP-14 Internal Audit. How internal audits of the BCMS are conducted (Clause 9.2).
  • QP-15 Management Review. How top management reviews the BCMS (Clause 9.3).
  • QP-16 Nonconformity, Corrective Action and Continual Improvement. How nonconformities are corrected and the BCMS improved (Clause 10).
  • QP-17 Operational Planning and Control and Management of Change. How BC operations and change are planned and controlled (Clause 8.1).
  • QP-18 BCMS Maintenance and Standard-Revision Management. How the BCMS is kept current with changes to ISO 22301.
WI Work instructions (7)
  • WI-01-01 Document Control Conventions and Formatting. How documents are numbered, formatted and controlled.
  • WI-06-01 Completing the Business Impact Analysis. How to complete the business impact analysis.
  • WI-07-01 Scoring a Business Continuity Risk Assessment. How to score a business continuity risk assessment.
  • WI-09-01 Activating a Business Continuity Plan. How to activate a business continuity plan.
  • WI-09-02 Operating the Emergency Control Centre. How to operate the emergency control centre.
  • WI-11-01 Planning and Facilitating a BC Exercise. How to plan and facilitate a business continuity exercise.
  • WI-14-01 Conducting a BCMS Internal Audit. How to plan and carry out a BCMS internal audit.
QF Forms and registers (51)
  • QF-01-01 Controlled Document Register. The master index of controlled documents.
  • QF-01-02 Document Change Request. Requests and records a document change.
  • QF-01-03 Distribution List. Records who holds controlled documents.
  • QF-02-01 Context (Internal and External Issues) Register. Records the internal and external issues affecting the BCMS.
  • QF-02-02 Interested Parties and Requirements Register. Records interested parties and their requirements.
  • QF-02-03 Legal and Regulatory Requirements Register. Records legal and regulatory requirements.
  • QF-02-04 BCMS Scope Statement. States the boundaries and applicability of the BCMS.
  • QF-03-01 Training Needs Analysis. Identifies BC training needs.
  • QF-03-02 Annual Training Plan. Plans BC training for the year.
  • QF-03-03 Training Attendance Sheet. Records attendance at training.
  • QF-03-04 Training and Exercise Feedback Form. Captures feedback on training and exercises.
  • QF-03-05 Competence Evaluation Record. Records the evaluation of competence.
  • QF-03-06 Competence and Skills Matrix. Maps competence and skills across roles.
  • QF-03-07 Roles and Responsibilities (RACI) and Authority Assignment. Assigns roles, responsibilities and authorities.
  • QF-03-08 Awareness Briefing Record. Records BC awareness briefings.
  • QF-04-01 BCMS Communication Plan and Matrix. Plans internal and external BC communication.
  • QF-04-02 Interested-Party Communication Log. Logs communication with interested parties.
  • QF-05-01 BCMS Risks and Opportunities Register. Records BCMS risks and opportunities.
  • QF-05-02 BC Objectives and Action Plan. Records BC objectives and the plan to achieve them.
  • QF-06-01 Business Impact Analysis Worksheet. Analyses the impact of disruption on activities.
  • QF-06-02 Prioritized Activities and RTO Register. Records prioritised activities and recovery time objectives.
  • QF-06-03 Dependency and Resource Requirements Record. Records dependencies and resource requirements.
  • QF-07-01 BC Risk Assessment Worksheet. Assesses business continuity risks.
  • QF-07-02 Risk Treatment Plan. Plans the treatment of business continuity risks.
  • QF-08-01 Strategy Options Evaluation and Selection Record. Evaluates and selects continuity strategy options.
  • QF-08-02 BC Solutions Implementation Record. Records the implementation of BC solutions.
  • QF-09-01 Business Continuity Plan Template. The template for a business continuity plan.
  • QF-09-02 Incident and Disruption Log. Logs incidents and disruptions.
  • QF-09-03 Incident Activation and Stand-down Record. Records the activation and stand-down of a response.
  • QF-09-04 Response Team Contact and Alternates Directory. The directory of response team contacts and alternates.
  • QF-09-05 Recovery and Return-to-normal Checklist. The checklist for recovery and return to normal.
  • QF-09-06 Post-Incident Report. Records the review of an incident after it is resolved.
  • QF-10-01 Emergency Communication and Call-tree Record. Records emergency communication and the call tree.
  • QF-10-02 Media and Stakeholder Statement Log. Logs statements to media and stakeholders.
  • QF-11-01 Annual Exercise Programme. Plans the exercise programme for the year.
  • QF-11-02 Exercise Plan. Plans a single business continuity exercise.
  • QF-11-03 Post-Exercise Report. Records the outcome of an exercise.
  • QF-12-01 BC Documentation and Capability Evaluation Record. Records the evaluation of BC documentation and capability.
  • QF-12-02 Supplier and Partner BC Capability Assessment. Assesses the BC capability of suppliers and partners.
  • QF-13-01 BCMS Performance Monitoring and Measurement Record. Records BCMS performance monitoring and measurement.
  • QF-14-01 Annual Internal Audit Programme. Plans the internal audit programme for the year.
  • QF-14-02 Internal Audit Plan. Plans a single internal audit.
  • QF-14-03 Internal Audit Checklist. The checklist used to audit the BCMS.
  • QF-14-04 Internal Audit Report. Reports the findings of an internal audit.
  • QF-15-01 Management Review Agenda and Input Pack. The agenda and inputs for a management review.
  • QF-15-02 Management Review Minutes and Action Log. Records the management review decisions and actions.
  • QF-16-01 Nonconformity and Corrective Action Report. Records a nonconformity and its corrective action.
  • QF-16-02 Corrective Action and Improvement Register. Registers corrective actions and improvements.
  • QF-17-01 BCMS Change Request and Impact Assessment. Requests a change and assesses its impact.
  • QF-17-02 Outsourced Process and Supply-chain Control Register. Controls outsourced processes and the supply chain.
  • QF-18-01 Standard-Change Impact Analysis and Update Log. Assesses the impact of a change to the standard and logs updates.
Every form above is also provided as a completed sample filled form, worked around a realistic organisation. That is 51 additional worked examples included in the set.
TOOL Validated Excel tools (4)
  • T-01 Business Impact Analysis Tool. Analyses impact and sets recovery time objectives.
  • T-02 BC Risk Assessment and Treatment Register. Assesses and tracks the treatment of BC risks.
  • T-03 BCMS Objectives and KPI Dashboard. Tracks BCMS objectives and KPIs at a glance.
  • T-04 BC Strategy and Resource Requirements Calculator. Calculates the resources a continuity strategy needs.
What you gain

Why teams choose a ready-made kit

✓
Save months of work

The writing is done. You edit instead of authoring from a blank page.

✓
Avoid consultant fees

Get a professional system for a fraction of the cost of hiring one.

✓
Nothing missed

Mapped clause by clause so every requirement is covered.

✓
Written in plain English

Easy to read, easy to adapt, no jargon you have to decode.

✓
Audit-ready evidence

Forms and registers capture exactly what an auditor asks to see.

✓
Yours to keep

A perpetual licence for your whole team, with free updates.

How to use it

From download to audit ready in five steps

Download

The full set arrives by email in minutes, in Word and Excel.

Customise

Swap the highlighted placeholders for your own company details.

Implement

Roll out the procedures and capture evidence on the forms.

Audit and review

Use the internal audit checklist and management review templates.

Get certified

Face the auditor with a complete, consistent system.

Who it is for

Built for the people who have to get it done

  • Companies going for ISO 22301:2019 certification for the first time.
  • Quality and compliance managers who want a proven framework, not a blank page.
  • Businesses asked for a documented system for a tender, a client, or pre-qualification.
  • Consultants and trainers who need an editable base to adapt for clients.
How it is delivered

Secure, editable, and yours to keep

📥

24-hour delivery

Files sent securely within 24 working hours of payment.

✍️

Fully editable

Microsoft Word and Excel, with placeholders to fill in.

♾️

Free updates

If the standard is revised, you get the update free.

👥

Team licence

One organisation, unlimited internal users, perpetual.

Compare the options

Kit, consultant, or from scratch

What mattersFrom scratchHire a consultantisofolder kit
Time to a full document setMonthsWeeksThe same day
Typical costYour timeThousands$149 once
Written by expertsNoYesYes
Mapped to every clauseRiskyUsuallyYes
You keep full controlYesLimitedYes, fully editable
Free updates on revisionNoExtra feeIncluded
Our experience

Documentation is all we do, and we have done it since 2017

isofolder is a team of auditing and consulting professionals with more than 80 years of combined experience. Our kits are written by practitioners and reviewed by working auditors, then refined across many real certification projects. When you buy from us, you are buying a system that has already helped companies pass their audits.

If you ever need a document that is specific to your operation and not already in the kit, our team will prepare it for you.

2017Trading since
2,000+Products delivered
750+Projects completed
100+Standards covered
What buyers say

Trusted by teams getting certified

★★★★★

The documents were well structured and easy to adapt. We cleared our certification audit with no major findings.

Quality ManagerManufacturing, United Kingdom
★★★★★

Saved us weeks of writing. Everything was mapped to the clauses, so we knew nothing was missing.

Operations LeadFood business, UAE
★★★★★

Clear, professional and fully editable. Far better value than the consultant quotes we received.

FounderServices company, United States
See it first

Not sure yet? Look inside before you buy

Preview 10 real pages from the ISO 22301:2019 toolkit right here, including a full form and part of an actual procedure. Judge the quality and writing style for yourself, with no sign-up.

Questions

ISO 22301:2019 toolkit, frequently asked

Who is ISO 22301 for?+
ISO 22301:2019 is the international standard for a business continuity management system. It suits any organisation that must keep critical activities running through disruption, such as banks and financial services, data centres and IT, healthcare, manufacturing, logistics, utilities, government and any business whose customers or regulators expect proven resilience, and wants to demonstrate it through certification.
Does it include a business impact analysis?+
Yes. There is a business impact analysis procedure, a BIA worksheet, a prioritised activities and RTO register, a dependency and resource requirements record and a dedicated Excel BIA tool, so you can identify critical activities and set recovery time objectives with evidence.
Does every form come with a filled example?+
Yes. All 51 forms are provided both blank and as a completed sample filled form, worked around a realistic organisation, so you can see exactly how each record is meant to look before completing your own.
Is it aligned to the other ISO management standards?+
Yes. ISO 22301:2019 follows the same Annex SL high-level structure as ISO 9001, ISO 27001 and others, so the context, leadership, planning, support, operation, evaluation and improvement clauses integrate cleanly with any management system you already run.
What formats do I get?+
Everything is editable Microsoft Word and Excel, including the business impact analysis tool, BC risk assessment and treatment register, BCMS objectives and KPI dashboard and BC strategy and resource requirements calculator in Excel. You replace the placeholders with your own organisation details.
What does the ISO 22301:2019 toolkit include?+
A clause-by-clause ISO 22301:2019 manual, 18 procedures, and 51 ready-to-use forms and records, plus sample filled examples. Everything is editable in Microsoft Word and Excel, and the full list is shown on this page.
Will it help me pass a certification audit?+
Yes. The documents are structured to the ISO 22301:2019 clauses an auditor checks and are written by experienced practitioners. You customise and implement them, and the kit gives you a complete, auditor ready system as your foundation.
What formats do I get, and can I edit them?+
Everything comes in editable Microsoft Word and Excel, with any presentations in PowerPoint. You replace the highlighted placeholders with your own details. No special software is needed.
How long does it take to customise?+
Most organisations tailor the core documents within a few days rather than the weeks or months it takes to write from a blank page. The manual and procedures are already written, so you are editing, not authoring.
How is it delivered?+
After your payment is confirmed, we send your files to you securely within 24 working hours, and usually much sooner. To keep the documents safe, we do not store them on public-facing servers.
Is there a licence limit or a subscription?+
There is no subscription. One purchase gives your organisation a perpetual licence with unlimited internal users, so your whole team can work on the documents.
Do I get updates when the standard changes?+
If ISO 22301:2019 is revised, you receive the updated documents free of charge, so your system stays current without buying again.
Is it suitable for my industry?+
The kit is written to the ISO 22301:2019 requirements, which apply across sectors. The documents are editable, so you keep what fits your operation and adapt or set aside anything that does not. It has been used by manufacturers, food businesses, laboratories, healthcare, IT and service companies.
How is this different from free templates online?+
Free templates are usually incomplete, generic, or out of date, and they leave you guessing what an auditor expects. This kit is a complete, current, clause-mapped set written by practitioners, with every document listed and explained so there are no surprises.
Can I check the toolkit before I buy?+
Yes. You can download a free sample document first to check the quality and writing style, so you can decide with confidence.
Complete your system

Frequently bought together

Get your ISO 22301:2019 system, ready today

Download the complete, editable toolkit and start building an audit ready system in minutes, with a free sample available before you buy.

ISO 22301:2019 Documentation Toolkit $149