ISO 22316: every control, and what you already have

58 controls 127 frameworks share controls with it International (ISO/TC 292); adopted as BS ISO 22316:2017 (UK), UNE-ISO 22316:2020 (Spain) and by other national bodies verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
ASD Strategies to Mitigate Cyber Security Incidents	5	measure it →
ASIS SPC.1-2009	5	measure it →
FFIEC IT Examination Handbook	5	measure it →
ISO/IEC 27031:2011	5	measure it →
ISO/TS 22317:2021	5	measure it →
ISO/TS 22318:2021	5	measure it →
Monetary Authority of Singapore Technology Risk Management Guidelines	5	measure it →
Nevada Gaming Control Board Cybersecurity Requirements	5	measure it →
NFPA 1600	5	measure it →
NIS2 Directive Implementing Acts	5	measure it →
Oman National Cybersecurity Framework	5	measure it →
Open Banking Security	5	measure it →

Every control

Code	Control	Also in
`ISO22316-01`	Organizational resilience and security - business continuity policy for building security and resilience	27
`ISO22316-02`	BCM program scope and objectives	0
`ISO22316-03`	Resource allocation for BCM	0
`ISO22316-04`	BCM roles and responsibilities	0
`ISO22316-05`	Management commitment to BCM	2
`ISO22316-06`	Business impact analysis methodology	1
`ISO22316-07`	Critical activity identification	0
`ISO22316-08`	Recovery time and point objectives	69
`ISO22316-09`	Resource requirements assessment	1
`ISO22316-10`	Interdependency mapping	0
`ISO22316-11`	Continuity strategy development	0
`ISO22316-12`	Recovery strategy for critical activities	69
`ISO22316-13`	Alternate site and resource planning	0
`ISO22316-14`	Supply chain continuity	77
`ISO22316-15`	Communication strategy during disruption	40
`ISO22316-16`	Exercise program development	0
`ISO22316-17`	Tabletop and simulation exercises	0
`ISO22316-18`	Full-scale testing procedures	0
`ISO22316-19`	Post-exercise review and improvement	0
`ISO22316-20`	Plan maintenance and update	0
`ISO22316-4`	Context and Scope of Organizational Resilience	0
`ISO22316-5.1`	Shared Vision and Clarity of Purpose	0
`ISO22316-5.2`	Understanding and Influencing Context	0
`ISO22316-5.3`	Effective and Empowered Leadership	0
`ISO22316-5.4`	Culture Supportive of Organizational Resilience	0
`ISO22316-5.5`	Shared Information and Knowledge	0
`ISO22316-5.6`	Availability of Resources	1
`ISO22316-5.7`	Coordinated Management Disciplines	0
`ISO22316-5.8`	Supporting Continual Improvement	0
`ISO22316-5.9`	Ability to Anticipate and Manage Change	0
`ISO22316-6.1`	Evaluation of Organizational Resilience	0
`ISO22316-6.2`	Integration with Strategic Planning	0
`ISO22316-A.1`	Stakeholder Engagement and Trust	1
`4`	4 Principles and coordinated approach	0
`4.1`	4.1 Principles of organizational resilience	0
`4.2`	4.2 Coordinated approach	0
`5`	5 Attributes of organizational resilience	0
`5.10`	5.10 Ability to anticipate and manage change	0
`5.2`	5.2 Shared vision and clarity of purpose	0
`5.3`	5.3 Understanding and influencing context	0
`5.4`	5.4 Effective and empowered leadership	0
`5.5`	5.5 A culture supportive of organizational resilience	0
`5.6`	5.6 Shared information and knowledge	0
`5.7`	5.7 Availability of resources	0
`5.8`	5.8 Development and coordination of management disciplines	0
`5.9`	5.9 Supporting continual improvement	0
`6`	6 Evaluating the factors that contribute to resilience	0
`6.1`	6.1 Evaluating the factors that contribute to resilience: general	0
`6.2`	6.2 Organizational requirements for evaluation	0
`6.2.1`	6.2.1 Organizational requirements for evaluation	0
`6.2.2`	6.2.2 Determining gaps	0
`6.3`	6.3 Monitoring and assessment	0
`6.3.1`	6.3.1 Monitoring and assessment: methods and processes	0
`6.3.2`	6.3.2 Review	0
`6.4`	6.4 Reporting	0
`A`	Annex A Relevant management disciplines (informative)	0
`STANDARD`	ISO 22316:2017: the standard, its scope and what is held	0
`STATUS`	Edition status: the 2017 first edition is current; guidance, not certifiable	0

Tell me when ISO 22316 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for ISO 22316, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition