# Clause 6.2.1: Establishing business continuity objectives

Establish business continuity objectives at the relevant functions and levels; each must be consistent with the continuity policy, measurable where practicable, informed by applicable requirements, and monitored, communicated and updated as appropriate, with the objectives retained as documented information.

Cloud: Set objectives that survive a provider's own recovery assumptions. If the provider promises a recovery time but your restore depends on a backup you have never exercised, your objective is not yet real.

Evidence: Retained objective register showing function, level, measure and owner; Evidence of monitoring against each measure; Communication records for the objectives; Update history for the objective set.

Test: Trace each objective to a test that has actually been run.

Citation: ISO 22301:2019, clause 6.2.1. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.