
ISO 22301 from impact analysis through to a live activation — with the same critical assets and threat library the rest of the platform uses, so continuity planning is not a parallel universe of its own.

Business impact analysis establishes what matters and how quickly it must come back. Recovery strategies say how. Exercises prove it. Activations record what actually happened — and the readiness score reflects all of it.
ISO 22301 · impact analysis to live activation
| Function | RTO | RPO | MTPD | Status |
|---|---|---|---|---|
| Payment processing | 2h | 15m | 8h | Tested |
| Customer support | 4h | 1h | 24h | Tested |
| Data warehouse | 24h | 4h | 72h | Untested |
| Payroll | 48h | 24h | 5d | Tested |
Deep rather than wide — eight sub-modules sit inside BCP Management.

Business functions and impact analysis, threat scenarios, recovery strategies, BC plans, exercises, activations, crisis teams and communication plans — rolled into a BC readiness score.

The asset register that recovery objectives and dependency mapping are built on, shared with risk and vulnerability management.
Every module shares one system of record, so evidence gathered in one place counts everywhere it is needed.



See impact analysis through to a live activation.