ISO 27031 ICT Business Continuity

ISO 27031 Information and Communication Technology Business Continuity

What Is ISO 27031?

ISO 27031 is the standard that supports the objectives of the ISO 27001 Information Security Management System and business continuity.

ISO 27031 explains in detail how the business continuity clause within ISO 27001 is applied in practice. It is a reference standard for those working on ICT business continuity.

What Does ISO 27031 Cover?

Information and communication technology is now a core part of day-to-day operations in every area of working life. ISO 27031 supports a structured, periodic review of the full range of ICT risks. Through that review, ICT business continuity is maintained, and the Information Security Management System is supported.

Differences Between ISO 27031 and ISO 22301

ISO 22301 addresses business continuity across all business plans. It covers threats such as economic shocks or supply disruption affecting a specific sector. ISO 27031 focuses on the infrastructure, operations, and disruption impacts of information and communication technology and the controls for those disruptions.

So ISO 22301 is the right fit for organisational-level business continuity, while ISO 27031 is the right fit for defining the technical processes where ICT operations are in scope.

Main Requirements of ISO 27031

• Critical capabilities and information: a key question is which people have the authority to access the relevant information.
• Infrastructure: the disruption and recovery conditions for information technology.
• Technology: the technology required for the organisation's operations.
• Data: the time and activities needed to restore business operations.
• Processes: the definition of business-continuity processes.
• Suppliers: assessment of the suppliers of the hardware and software infrastructure that supports the continuity of business processes.

Consultancy

For any questions about the ISO/IEC 27031 certificate, you can reach out to Sistem Patent Kalite specialists.