# Clause 4.4: Business continuity management system

Set up a business continuity management system, put it into effect, keep it running and keep improving it, including the processes it needs and how they interact, as the standard requires.

Cloud: One continuity system has to cover capability you own and capability you rent, with the same objectives and the same review. Splitting the cloud estate into a separate informal process is how provider incidents end up outside the management review.

Evidence: BCMS manual or equivalent showing the constituent processes and their interactions; Process owners named for each BCMS process; Evidence of operation across a full cycle rather than at implementation only.

Test: Confirm the cloud services appear in the same continuity system, objectives and audit cycle as owned systems.

Citation: ISO 22301:2019, clause 4.4. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.