ISO/TS 22330:2018

Security and resilience — Business continuity management systems — Guidelines for people aspects of business continuity

This document gives guidelines for the planning and development of policies, strategies and procedures for the preparation and management of people affected by an incident. This includes: — preparation through awareness, analysis of needs, and learning and development; — coping with the immediate effects of the incident (respond); — managing people during the period of disruption (recover); — continuing to support the workforce after returning to business as usual (restore). The management of people relating to civil emergencies or other societal disruption is out of the scope of this document.

Sécurité et résilience — Systèmes de gestion de la poursuite des activités — Lignes directrices concernant les aspects humains de la poursuite des activités

General Information

• Status: Published
• Publication Date: 30-May-2018
• ICS: 03.100.01 - Company organization and management in general
• ICS: 03.100.70 - Management systems
• Technical Committee: ISO/TC 292 - Security and resilience
• Drafting Committee: ISO/TC 292/WG 2 - Continuity and organizational resilience
• Current Stage: 9093 - International Standard confirmed

Standards Content (Sample)

TECHNICAL ISO/TS
SPECIFICATION 22330
First edition
2018-06
Security and resilience — Business
continuity management systems
— Guidelines for people aspects of
business continuity
Sécurité et résilience — Systèmes de gestion de la poursuite des
activités — Lignes directrices concernant les aspects humains de la
poursuite des activités
Reference number
©
ISO 2018
© ISO 2018
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting
on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address
below or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Fax: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii © ISO 2018 – All rights reserved

Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 People aspects overview . 2
4.1 General . 2
4.2 The need for a people aspects approach . 3
4.3 Structure . 4
5 Precursors . 4
5.1 General . 4
5.2 Duty of care . 5
5.3 Attributes of the organization . 6
5.4 Team and individual competencies . 7
6 Preparing to respond . 7
6.1 General . 7
6.2 Business impact analysis . 7
6.3 Managing people risks in business continuity. 8
6.4 Including people aspects in business continuity management . 8
6.5 Knowledge, skills and abilities . 8
6.5.1 General. 8
6.5.2 Education . 8
6.5.3 Learning and development . 9
6.5.4 Experience . 9
6.6 Awareness across an organization . 9
7 Delivering the response .10
7.1 General .10
7.2 Respond.11
7.2.1 General .11
7.2.2 Responding to early warning .11
7.2.3 Immediate actions to protect and secure people .11
7.2.4 Incident response organization .15
7.3 Recover .17
7.3.1 General.17
7.3.2 Mobilizing the workforce in adverse conditions .17
7.3.3 Using alternative work sites.18
7.3.4 Working from home .18
7.3.5 People management issues .19
7.4 Restore .20
7.4.1 General.20
7.4.2 Actions for sustainable restoration of operations .21
7.5 People support strategies .21
7.5.1 Managing the needs of families and friends .21
7.5.2 Physical and psychological well-being .22
7.6 Communications .23
7.6.1 General.23
7.6.2 Importance of internal communication .24
7.6.3 Communication systems and pathways .25
7.6.4 External communications .26
7.6.5 Social media .27
7.7 Managing the impact of travel issues .27
7.7.1 General.27
7.7.2 Travel issues .28
7.7.3 Managing a travel incident .28
8 Review and continuous improvement .29
8.1 General .29
8.2 Continuous improvement through exercising .29
8.3 Feedback from the workforce or external agencies .29
8.4 Record-keeping .30
8.5 Risk review .30
Annex A (informative) Psychological response management .31
Annex B (informative) Relatives response team .35
Bibliography .38
iv © ISO 2018 – All rights reserved

Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out
through ISO technical committees. Each member body interested in a subject for which a technical
committee has been established has the right to be represented on that committee. International
organizations, governmental and non-governmental, in liaison with ISO, also take part in the work.
ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of
electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are
described in the ISO/IEC Directives, Part 1. In particular the different approval criteria needed for the
different types of ISO documents should be noted. This document was drafted in accordance with the
editorial rules of the ISO/IEC Directives, Part 2 (see www .iso .org/directives).
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. ISO shall not be held responsible for identifying any or all such patent rights. Details of
any patent rights identified during the development of the document will be in the Introduction and/or
on the ISO list of patent declarations received (see www .iso .org/patents).
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation on the voluntary nature of standards, the meaning of ISO specific terms and
expressions related to conformity assessment, as well as
...