# What does ISO 20996 mean for cloud customers?

It means the continuity evidence you already keep will be read in a cloud-specific way: which services carry critical activities, which regions, what the contract promises, and what you have tested yourself.

## What are the first things to fix?

A scope that names services and regions, one restore you have run, and the three continuity terms in each critical contract.

## Does it change my ISO 22301 certification?

No. It is guidance, not an amendment. Your continuity system remains the thing you are assessed against.

## What will an auditor ask for?

The evidence list per clause: the scope, the impact analysis, the strategies, the plans, the exercise records and the management review.

## Can I prepare before the text is public?

Yes. The work is in your estate and your contracts, not in the draft's wording.

Last updated: 2026-10-20.