{
  "node_id": "iso-22301-biz-continuity",
  "title": "Biz Continuity (ISO 22301)",
  "domain": "Legal & IP Sovereignty",
  "version": "1.1.0",
  "last_updated": "2026-04-09",
  "bluf": "Compliance with this node mandates the implementation and maintenance of a comprehensive Business Continuity Management System (BCMS) in alignment with ISO 22301 requirements. Top management must formally establish and endorse a documented business continuity policy appropriate for the organization's purpose, as stipulated by Clause 5.2. Foundational to this system are a completed business impact analysis and a formal risk assessment. Per Clause 8.2.2, the BIA must determine critical recovery parameters, with BIDDA enforcing a maximum Recovery Time Objective (RTO) of 24 hours, a Recovery Point Objective (RPO) within 12 hours, and a Maximum Tolerable Period of Disruption (MTPD) not exceeding 48 hours. The risk assessment, a requirement of Clause 8.2.3, must identify and evaluate disruption risks to prioritize strategic responses. Clause 8.4 necessitates the creation of documented business continuity plans and procedures, which must be supported by an assigned incident response team and include verification of supply chain resilience. To ensure ongoing effectiveness and validate these strategies, Clause 8.5 requires an exercise programme, with testing conducted at a minimum frequency of every 365 days. Finally, to maintain conformity and facilitate continual improvement, the BCMS must undergo periodic internal audits and management reviews, both scheduled at least annually (every 365 days), consistent with the principles of Clause 9.2.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "ai_overlay_2026",
      "industry_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "iso-31000-risk-mgt",
    "iso-9001-quality-mgt",
    "iso-27001-2022",
    "iso-27031-dr-readiness",
    "nist-sp-800-34-contingency-planning-guide",
    "bcbs-principles-operational-resilience"
  ],
  "primary_citations_count": 7
}