Topic hub
The ISO 22301 hub
Guidance on ISO 22301 business continuity: the BIA, RTO/RPO, and how one BCMS evidences the tested continuity DORA and NIS2 both expect.
Guides
ISO 22301, explained
What is a Business Impact Analysis (BIA)?
The BIA is the foundation of continuity: it tells you what's critical, how quickly it must come back, and what it relies on. Get it right and the rest of your plan almost writes itself.
31 July 2026
RTO vs RPO: the two recovery objectives, explained (with MTPD)
One is about time, the other about data, and confusing them is one of the most common mistakes in continuity planning. Here's RTO vs RPO in plain English, plus how MTPD fits.
31 July 2026
Business continuity vs disaster recovery: what's the difference?
They're used interchangeably, but they aren't the same. Disaster recovery is the IT-restoration part of the much broader discipline of business continuity. Here's how they fit together.
31 July 2026
What is ISO 22301? Business continuity management, explained
ISO 22301 is the international standard for business continuity management. At its heart: a business impact analysis, recovery objectives, tested plans, and a management system that stays current.
14 June 2026
Using one ISO 22301 BCMS to satisfy DORA and NIS2
DORA Article 11 and NIS2 Article 21 both expect tested continuity and recovery. ISO 22301 is the ready-made framework, so you build it once and evidence it against both.
12 June 2026Build your ISO 22301 BCMS in ResiliencePilot
See it on your own data and frameworks, with your security and data-residency questions answered.