ISO 27001 implementation and certification readiness
From current state to a passed certification audit, with a fixed scope agreed before we start.
Services
Business continuity and ISO 22301
Business impact analysis, continuity and recovery plans, and exercises that show the plans work when something goes wrong. Structured as a management system and taken to certification if ISO 22301 is a requirement for you.
What we do
Business impact analysis
Which processes matter most, how long each can be down, and what people, systems and suppliers they depend on.
Risk and scenario assessment
The realistic disruptions for your organisation: power and connectivity loss, key people unavailable, a supplier failing, ransomware, flooding at the site.
Strategy and plans
Recovery strategies, continuity plans and runbooks that someone can follow at two in the morning.
Exercises
A tabletop exercise with your management team, then a technical recovery test, with lessons captured and plans updated.
ISO 22301 certification readiness
If you want the certificate, we structure the work as a business continuity management system and prepare you for the audit.
What you receive
- Business impact analysis report
- Continuity strategy and plan set
- Incident and crisis communication procedures
- Exercise reports and improvement log
- ISO 22301 documentation set where in scope
Common questions
- Is this the same as disaster recovery?
- Disaster recovery is the IT part: restoring systems and data. Business continuity covers the whole operation, including people, premises, suppliers and communication. We do both and keep them consistent with each other.
Related services
ISMS internal audit, surveillance support and maintenance
Independent internal audits, surveillance preparation and the 2013 to 2022 transition for companies that already hold ISO 27001.
Personal Data Protection Act readiness
Get ready for Sri Lanka’s PDPA, whose core obligations commence on 1 January 2027, and align the work with ISO 27001 so you do it once.
Not sure where you stand? Start with a scoping call.
Forty-five minutes, no charge. We ask about your organisation, what is driving the project and what you already have in place, then send a written proposal with a fixed scope and fee.