Business continuity · ISO 22301
Keep operating when something goes wrong.
Business impact analysis, continuity and crisis plans aligned to ISO 22301, and exercises that prove they work — for Malaysian organisations that cannot afford a long outage.
- Business impact analysis and recovery time objectives
- Continuity, recovery and crisis management plans (ISO 22301)
- Crisis team structure, roles and escalation
- Desktop and functional exercises, with corrective actions
Senior, certified GRC team · Think Risk International Sdn Bhd, Kuala Lumpur · part of the Think Risk group
Thank you — your enquiry is in.
Our team will reply to you personally. A confirmation is on its way to your inbox.
- ISO 9001
- ISO 14001
- ISO 45001
- ISO/IEC 27001
- ISO 31000
- ISO 37001
- ISO 22301
- COSO
- IIA IPPF
- Section 17A MACC Act
- ISPS Code
What you get
Business Continuity & Crisis Preparedness
- ISO 22301
- Business impact analysis and criticality assessment
- Continuity, recovery and contingency plans (ISO 22301)
- Crisis management structure, roles and escalation
- Desktop and functional exercise design and evaluation
- Post-incident review and corrective action tracking
How it runs
Five steps, every time.
- 1
Scope & plan
Objective, scope, criteria and reporting line agreed; workplan mapped to your risks.
- 2
Evidence
Document review, data interrogation, walkthroughs and interviews where the work is done.
- 3
Analyse
Findings rated on a defensible risk basis, root cause separated from symptom.
- 4
Report
Decision-ready findings, business impact and a corrective action plan with owners and dates.
- 5
Embed
Capability transfer so your team sustains it; actions and KPIs handed over in StrategyX.
FAQ
Before you ask.
What is ISO 22301?
ISO 22301 is the international standard for business continuity management systems. It sets out how to plan for, respond to and recover from disruptive incidents. We can build a programme aligned to it whether or not you intend to seek certification.
What is a business impact analysis?
A business impact analysis (BIA) identifies your critical activities, how the impact of a disruption grows over time, and the recovery time and resources each activity needs. It is the basis for every continuity strategy and plan that follows.
How often should continuity plans be tested?
ISO 22301 expects exercises and tests at planned intervals and after significant change; most organisations exercise at least once a year. We design desktop and functional exercises, evaluate them and track the corrective actions.
What does an engagement cost?
It depends on the model. Projects such as a gap assessment or a single internal audit are quoted at a fixed fee for a fixed scope. Retained and co-sourced internal audit is billed as a retainer or per audit cycle, and investigations at a day rate. Tell us what you need and we will send a written proposal.
Ready when you are.
One short form. A personal reply from our team — no obligation.
Book a consultation