← Toolkit
TPL-040MatrixBusiness continuityGovernance

ISO 22301 conformity matrix

Clause by clause: requirement, expected evidence, status, gap, action.

The audit preparation tool. Every clause from 4 to 10 is broken into elementary requirements, with the evidence an auditor will request, the status, the gap found and the associated action. A column maps to ISO/IEC 27001 for a combined audit.

How to use it

  • Fill the "evidence" column with a dated document name
  • Prioritise gaps on 6.1, 8.5 and 9.3
  • Have a peer review it before the stage 1 audit

Courses that use it

BC-301

Implementing an ISO 22301 BCMS

CY-202

Connecting cyber and continuity

Related templates

TPL-001

Business continuity policy

Policy template meeting ISO 22301 clause 5.2, ready to sign.

TPL-002

Continuity programme charter

The written mandate that gives the practitioner authority.

TPL-010

Business impact analysis questionnaire

Fifteen factual questions, designed to be answered in ten minutes.

TPL-011

Multi-criteria impact scale

Five criteria, five levels, five time horizons, with an override rule.