A free, no-nonsense Excel self-assessment for ISO 22301:2019, the business continuity management system. Rate your organisation against every requirement, see the gaps on a live dashboard, and build your path to certification.
Prefer done-for-you? Get the ISO 22301 toolkit or explore training.
ISO 22301, last revised in 2019, is the international standard for a Business Continuity Management System, or BCMS. It helps organisations prepare for, respond to and recover from disruption.
Disruption is inevitable, from cyber incidents to supplier failures to natural events. ISO 22301 asks you to understand which activities really matter, how quickly they must be restored, and what it takes to keep them running.
It uses the harmonised Clause 4 to 10 structure, with a detailed Clause 8 at its core: business impact analysis, risk assessment, continuity strategies and solutions, plans and procedures, exercising and evaluation.
It suits any organisation that cannot afford long outages, and is often expected by customers, insurers and regulators. Certification demonstrates genuine resilience, not just a plan on a shelf.
Current edition
At the core of Clause 8
Clauses, numbered 4 to 10
Recovery objectives set
This workbook turns the whole standard into a working self-assessment. No consultants required to get started. Open it, answer honestly, and watch your position take shape on the dashboard.
Score each requirement twice, once for compliance and once for maturity. See where you conform on paper and where the practice is genuinely embedded.
Every clause from 4 to 10, the full 35 requirements, each with plain-English guidance on what an auditor looks for.
Compliance, average maturity, progress and a red, amber, green view by section. It updates itself as you type.
Capture the gap, the action, an owner and a target date next to every requirement, so the assessment doubles as your improvement plan.
Built around the exact structure a certification body audits, so your results point straight at what to fix before a review.
Standard Excel, no macros and nothing to install. Rate items with simple drop-downs. Works on the desktop app and in the browser.
Are you meeting the requirement today? Rate it Fully, Largely, Partially or Non-conformant, backed by evidence.
How embedded and repeatable is the approach, regardless of today's compliance? Rate it from 0, not started, to 4, optimised.
Front page to capture the audit scope dates, auditors and auditee.
How to run the audit, the audit method and the results key.
Audit Progess, conformity rate, non conformities and results by sections.
Every requirement with its verification questions, plus method, evidence and result.
Grab the Excel file. No sign-up wall, no macros, nothing to install.
Pick a compliance status and a maturity level from the drop-downs, and note your evidence.
See your overall position and the exact requirements that need attention.
Assign owners and target dates, then track progress to certification readiness.
The free tool shows where you stand. When you are ready to build the BCMS, these paid resources from Risk Professionals get you there faster.
A complete, editable ISO 22301 document kit, mapped to the standard and ready to implement, so you never start from a blank page.
Accredited ISO 22301 training for your team, from foundation through lead implementer and lead auditor.
Hands-on help, from a gap assessment to a virtual executive who helps run the system with you.
Yes. The tool is offered free for your organisation’s own internal use, with no sign-up wall and no macros. You may use and reproduce it internally, but not sell, rebrand or redistribute it for commercial gain. Full terms are on the Cover sheet.
ISO 22301:2019. It covers clauses 4 to 10, including the business impact analysis, risk assessment, strategies, plans and exercising requirements of Clause 8.
The tool includes plain-English guidance so you can start straight away. For a formal implementation or certification you should still obtain the official standard from ISO or an authorised reseller. The tool summarises the requirements and is not a substitute for the standard.
Yes. It is built for planned internal audits under clause 9.2, with 149 verification questions, an audit method, evidence and result columns, and a live dashboard. Keep the completed file as your audit record.
No. This worksheet helps you understand your position and prioritise improvements. Certification can only be granted by an accredited certification body after a formal audit.