# Clause 8.3.2: Identification of strategies and solutions

Identify possible strategies and solutions according to how far they would: keep prioritized activities going, or recover them, within the time frames identified and at the capacity agreed; protect those activities; make a disruption less likely; make it shorter; reduce its effect on products and services; and make sure enough resources are available.

Cloud: Identification should include the options the contract already gives you: a second region, a read replica, data export, a grace period after termination. Often the cheapest strategy is a right you have already paid for and never used.

Evidence: Option analysis scoring candidates against each identification factor; Evidence time frame and capacity requirements came from the BIA; Coverage of likelihood reduction options, not recovery options alone.

Test: List the continuity options already available under each contract.

Citation: ISO 22301:2019, clause 8.3.2. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.