Transitioning from BS 25999-2 to ISO 22301

Information and support to assist BSI clients in making the transition

In May 2012, the ISO published ISO 22301: Societal security - Business continuity management system - Requirements. ISO 22301 is the new international Standard for business continuity management. The good news for BS 25999 certification customers is that the additional requirements are not too difficult.  

BSI will be able to assess your organization to the new Standard during your usual continuing assessment visits, providing good progress is being made towards the expiry deadline that is approaching. You and your BSI Client Manager will need to agree when you are ready to be transitioned to the new Standard.

ISO 22301:2012 will supersede BS 25999-2. This means that any organization holding a certificate to BS 25999-2:2007 wishing to retain business continuity certification will need to demonstrate compliance to ISO 22301:2012. The deadline for BSI to ensure all of our clients are through transition is 31 May 2014. It is important that you commence this process as soon as possible as failure to complete your transition by 31 May 2014, will result in the expiry of your certification.


What are the main changes?

  • First standard to be written using the new high level structure, which is common to all new management systems standards. This will make integration straightforward when implementing more than one management system
  • Change in the way an organization is defined
  • Clearer expectations on management
  • Preventive action has been replaced with “actions to address risks and opportunities” and features earlier
  • ISO 22301 puts a much greater emphasis on setting the objectives, monitoring performance and metrics – aligning BC to top management strategic thinking

Find out more about the changes in our on demand webinar