One of the most difficult and time-consuming elements of implementing ISO standards can be carrying out an operational risk assessment. All ISO management standards are risk-based frameworks, but do not prescribe a specific risk assessment methodology. Choosing the correct risk assessment methodology for your organisation is an essential step toward effectively managing your operational risks.

The risk assessment methodology should address the size of the risks versus organisational risk appetite, apply a proportional response. We take a pragmatic approach to assessing and documenting, and prioritising the real risks to your business operations and help you to develop effective risk treatment plans.

Before implementing ISO 22301, it is common for organisations to have inadequate documentation and, in some cases, no written business continuity policies or processes at all. Where policy gaps are identified, we can help you speed up the process of creating policy documents.

We can provide both template and bespoke documentation. Our aim is to help you produce policy documents that are practical and brief enough to be usable but robust enough to provide effective quality and process management.

Before you can qualify for an ISO 22301 certificate, you will need to implement an internal audit program. You will also need to have carried out at least some of the audits from your schedule. We can help you get up to speed quickly by walking you through the security audit process.

Our internal audit service is also aimed at organisations that already have an internal audit program in place but need assistance with the audit workload, or who feel they would benefit from a fresh pair of eyes from time to time.

Periodic management reviews are a cornerstone of an ISO based management system, and you will need to have held at least one management review to gain certification.

We will guide you through the process and ensure effective review of internal and external audit results, security incident records and your updated risk assessments to help you ensure continual improvement of your Business Continuity Management System.

Simon Hunt can provide expert assistance to guide you through the certification process to ensure you are fully prepared for the final certification audits with your UKAS-accredited certification body. We can also attend the certification audits themselves if you want additional support.

This will help to ensure that the effectiveness of your BCMS is communicated to your external auditor in terms that will be familiar to them.