ISO/IEC 27031:2025
What is ISO/IEC 27031?
ISO/IEC 27031 provides guidance on ensuring that information and communication technology (ICT) is prepared to support business continuity. It outlines a framework for ICT readiness that aligns with broader business continuity objectives, helping organisations to prevent, respond to and recover from ICT-related disruptions that could impact critical operations.
Why is ISO/IEC 27031 important?
In today’s digital world, organisations rely heavily on ICT systems to operate, deliver services and maintain trust with stakeholders. Disruptions to these systems—from cyberattacks to system failures—can have severe consequences. ISO/IEC 27031 helps organisations build ICT resilience by integrating readiness planning into business continuity and information security practices. It ensures that ICT services can be restored within agreed timeframes, protecting operations, reputation and customer trust. This readiness is not only about internal systems but also extends to dependencies on third-party services such as cloud providers.
Benefits
- Supports uninterrupted business operations during ICT disruptions
- Strengthens alignment between ICT, security and continuity strategies
- Reduces recovery time and data loss after incidents
- Enhances organisational resilience and stakeholder confidence
- Integrates smoothly with ISO/IEC 27001 and ISO 22301 practices
FAQ
Any organisation that relies on ICT systems and wants to ensure those systems can support business continuity during and after disruptions.
It complements ISO/IEC 27001 by addressing ICT continuity in the context of information security, and supports ISO 22301 by aligning ICT readiness with broader business continuity objectives.
Yes, the standard considers modern ICT environments, including reliance on external services such as cloud platforms, and encourages organisations to assess and integrate these into their readiness plans.
Informations générales
-
État actuel: PubliéeDate de publication: 2025-05Stade: Norme internationale publiée [60.60]
-
Edition: 2
-
Comité technique :ISO/IEC JTC 1/SC 27ICS :35.030
- RSS mises à jour
Cycle de vie
-
Précédemment
AnnuléeISO/IEC 27031:2011
-
Actuellement
