# Clause 8.3: Business continuity strategies and solutions

Choose continuity strategies from the impact and risk findings, select the solutions that deliver them, determine the resources they need and put them into effect.

Cloud: Strategies for cloud continuity range from a second region through a second provider to a manual workaround. Each has a different recovery time and a different cost, and none of them is real until it has been exercised.

Evidence: Strategy document traceable to BIA and risk assessment outputs; Selection rationale for the chosen solutions; Evidence solutions are implemented and maintained.

Test: List the strategy chosen for each critical service and the last time it was exercised.

Citation: ISO 22301:2019, clause 8.3. Source: https://compliance.theartofservice.com/frameworks/iso-22301-2019. Last updated: 2026-10-20.