The continuity-management trio:
- ISO 22301 — the certifiable Business Continuity Management System (BCMS), Annex SL family
- ISO 22361 — crisis management guidance for executives and incident teams
- ISO 27031 — ICT readiness for business continuity (DR planning aligned with the BCMS)
The foundational document for the family is the Business Impact Analysis (BIA) — Cybsis 2.0 ships it as a first-class artefact linked back to the asset register and risk register.