Most business continuity packs are a folder of blank forms. This one is a working system: every requirement in ISO 22301:2019, including Amendment 1:2024, is answered by a named artifact, a named owner and a record that proves it ran.
The whole pack is built around one complete reference organization – Northgate Logistics Ltd, 214 staff across 3 sites – carried through every file. The data is illustrative sample data, and it is there on purpose: you learn the method by reading a system that already answers, not by staring at an empty table.
WHAT'S IN THE BOX?
• 90-slide implementation guide (PowerPoint) – clauses 4 to 10, one slide per requirement, with the clause number, the owner and the evidence named on the page
• 63-slide audit-readiness workshop – a clause-by-clause rehearsal you can put in a diary
• 18-slide executive briefing – the board version, in the board's language
• 14-slide exercise facilitator run-sheet – run the first exercise without a consultant
• 43-tab Excel workbook – BIA register, impact grid, dependency map, threat register, strategy decisions, plan index, call tree, exercise program, CAPA log, audit checklist, gap analysis and a live heat map. 298 working formulas, no macros, no error cells.
• 13 policies and procedures – clause-mapped, twelve controlled sections each
• 3 support documents – Start Here, version and change log, license sheet
• 16 printable forms – BIA questionnaire through post-incident review
• 6 ready exercise scenarios – three to four injects each, two to four hours, with roles, timing and the plan each one tests
• 49 internal audit questions – each with the evidence that closes it
• 23-page How to Use It guide (PDF) plus 4 one-page cards
• 201 Word pages of editable source, US English throughout
WHAT THE GUIDE COVERS, IN ORDER
1. Establish – 7 slides
2. Plan – 4 slides
3. Support – 7 slides
4. Analyze – 18 slides
5. Strategize – 8 slides
6. Respond – 8 slides
7. Prove it – 7 slides
8. Check and improve – 8 slides
9. Deliver – 6 slides
THE FOLDER YOU GET
ISO22301_BCMS_Toolkit/
00_Start_Here.docx – start here
01 to 13 *.docx – policies and procedures
14_License_Sheet.docx – license
15_Version_and_Change_Log.docx – what is tracked and how it changes
F01 to F16 *.docx – printable forms
S01 to S06 *.docx – exercise scenario packs
*.xlsx – the BIA and BCMS workbook
*.pptx – the guide and the three companion decks
*.pdf – the how-to guide and four one-page cards
HOW THE WORKBOOK THINKS
Set your tolerance once on the Setup tab. The priority column reads it, the recovery sequence sorts itself against it, the dashboard recolors, and the heat map recounts from the risk rows with a live formula. Change one threshold and the whole system moves with it, which is exactly the demonstration an auditor asks for.
The register also carries a conflict flag. In the worked example, 11 of the 12 activities recover inside their own tolerance and one does not. The pack names the gap, sizes it in hours and percent, and gives the three honest ways to close it: buy the recovery time, re-cut the tolerance with the agreement attached, or accept it in writing and report it to the management review.
THE SIX EXERCISES, READY TO RUN
• S01 Ransomware outage – 4 injects over 3 hours, closes BCP-02, BCP-05
• S02 Key supplier failure – 3 injects over 2 hours, closes BCP-04
• S03 Site loss – fire – 4 injects over half a day, closes BCP-01
• S04 Severe heat and welfare – 3 injects over 2 hours, closes BCP-07
• S05 Power and connectivity loss – 4 injects over 3 hours, closes BCP-02, BCP-07
• S06 Transport network disruption – 3 injects over 2 hours, closes BCP-03
WHO THIS IS FOR
A continuity manager standing up a first BCMS. A quality, risk or security lead handed business continuity as a second job. A consultant who wants a defensible starting point instead of a blank page. A supplier being asked for evidence by a customer's own resilience program.
WHAT THIS IS NOT
It is not certification, and it will not get you certified. It is not legal advice, and it is not a substitute for the purchased standard – clause numbering here follows ISO 22301:2019 as published, and you should verify it against your own copy. It is implementation material, with the working shown, so you can judge the method before you commit to it.
QUESTIONS BUYERS ASK
1. Does the workbook need macros? No. Every calculation is an ordinary spreadsheet formula, so it opens with security warnings off.
2. Will it work for a service business rather than a logistics firm? Yes. The activities, dependencies and plans are the worked example, not the model. Replace the rows and the formulas still rank them.
3. How long does implementation take? The guide sets out a ninety-day path in five stages, one workshop each, ending at the stage-one evidence pack on slide 85.
4. Is the sample data real? It is illustrative sample data for a reference organization created for this pack. Nothing confidential is included.
5. Does it cover the 2024 amendment? Yes. The clause map and every document header follow ISO 22301:2019 including Amendment 1:2024.
6. Can I edit everything? Yes. Word, Excel and PowerPoint source files, no templates locked behind a viewer.
7. What happens when the standard is revised? The edition and what is being tracked is stated on slide 88 of the guide and in the version log.
8. Can I use it for more than one client? The license sheet sets out exactly what a single-user license covers, in plain language.
Before you buy: open the preview images. They are pages from the actual files, not a rendering of what the files might contain.
Got a question about the product? Email us at support@flevy.com or ask the author directly by using the "Ask the Author a Question" form. If you cannot view the preview above this document description, go here to view the large preview instead.
Source: Best Practices in ISO 22301, Business Impact Analysis PowerPoint Slides: ISO 22301 BCMS and Business Impact Analysis Toolkit PowerPoint (PPTX) Presentation Slide Deck, WebsiteGeek