ISO 22301:2019 Business Continuity Management System Training The purpose of the business continuity management system is to make proactive and reactive plans to help avoid crises and disasters that cause and may disrupt the work in workplaces, and to help ensure that the problem that occurs quickly can be restored when these processes occur. ISO 22301:2019 4 headings are important in this standard; However, it does not provide conditions or suggestions on how to plan, implement, control, take precautions, and leaves the methods to organizations. Therefore, it can be applied to institutions in every sector.

Hardware, software, information assets and technologies are determined, policies are defined according to the characteristics of the business, organization, organizational assets and technologies. Targets and risk criteria that may occur are defined within the policies determined at the Risk Assessment stage. At the Risk Assessment stage, the dangers that assets within the scope of 22301 may encounter, the probability of these dangers, and the damages that the risk will cause when it occurs are determined by the asset owners. At this stage, risks are analyzed and evaluated. According to the evaluations made, risk options are defined and evaluated. In the operation of controls, previously selected controls are applied to minimize risks and meet control objectives.

In resource management, management actions, resources, responsibilities and priorities are defined in accordance with the risk management plan determined within the institution. Risk improvement stages; Risk management is risk acceptance and risk improvement.

Risk management; It is the structural development and execution of management culture, policies, procedures and practices for functions such as identification, analysis, evaluation and intervention of risks.

Risk improvement; is the selection and implementation of measures to reduce risk.