ISO TS 22330-2018 PDF

Full title and description

ISO/TS 22330:2018 — Security and resilience — Business continuity management systems — Guidelines for people aspects of business continuity. Technical Specification providing guidance for planning, preparing and managing the people (staff, contractors and other personnel) affected by an incident so organizations can maintain, respond and recover business functions with due regard for human needs and capabilities.

Abstract

This technical specification gives guidance for the planning and development of policies, strategies and procedures for the preparation and management of people affected by an incident. It covers preparation (awareness, needs analysis, learning and development), coping with immediate effects (respond), managing people during disruption (recover) and supporting the workforce after return to business as usual (restore). Management of people in the context of wider civil emergencies or societal-scale disruption is out of scope.

General information

• Status: Published (Technical Specification; confirmed current following ISO review in 2022)
• Publication date: 2018-06 (published 31 May 2018; ISO edition recorded as 2018‑06)
• Publisher: International Organization for Standardization (ISO)
• ICS / categories: 03.100.01 (Company organisation and management in general)
• Edition / version: Edition 1 (ISO/TS 22330:2018)
• Number of pages: 38

Scope

Provides guidelines to help organizations integrate people-related activities into their business continuity management system (BCMS). The document addresses workforce preparedness, immediate response for people safety and wellbeing, managing people continuity during operational disruption and supporting employees through recovery and restore phases. It does not define BCMS requirements (those are in ISO 22301) and excludes management of people in civil‑emergency or broad societal crisis contexts.

Key topics and requirements

• Leadership, roles and responsibilities for people aspects within a BCMS
• Identifying people-related needs and critical roles (competence mapping and staffing continuity)
• Communication planning and information for employees and other stakeholders
• Awareness, training, exercises and learning & development for people preparedness
• Safety, wellbeing and psychosocial support during and after incidents
• Recruitment, HR processes and rostering to maintain essential functions
• Remote working, flexible working arrangements and redeployment strategies
• Return-to-work planning, reintegration and post-incident support
• Legal, ethical and privacy considerations when managing people data in incidents
• Monitoring, review and continual improvement of people-related BC measures

Typical use and users

Used by business continuity and resilience managers, HR and occupational health professionals, crisis and incident management teams, senior management responsible for BCMS, auditors and consultants developing or reviewing people-focused continuity arrangements. Useful across sectors where continuity of critical people-dependent functions is essential (private, public and non-profit organizations).

Related standards

Commonly used alongside ISO 22301 (BCMS requirements), ISO 22313 (guidance on ISO 22301), ISO/TS 22317 (business impact analysis), ISO/TS 22318 (supply chain continuity), ISO 22320/22322/22324 (incident & emergency management and public warning guidance), ISO 22398 (exercises) and people/HR standards such as ISO 30408 (human governance) where governance and HR practice intersect with continuity planning.

Keywords

business continuity, BCMS, people aspects, workforce preparedness, staff wellbeing, crisis communication, training, recovery, human governance, HR continuity

FAQ

Q: What is this standard?

A: ISO/TS 22330:2018 is a Technical Specification giving guidelines for the people-related aspects of business continuity management systems — how to prepare, protect and manage people before, during and after incidents.

Q: What does it cover?

A: It covers planning and developing policies, awareness, needs analysis, training, immediate response measures for people, managing staff during disruption, and post-incident support and reintegration. It does not set BCMS requirements nor address large-scale civil emergency management.

Q: Who typically uses it?

A: Business continuity professionals, HR and occupational health teams, crisis managers, senior leaders, auditors and consultants focused on ensuring people continuity and wellbeing during incidents.

Q: Is it current or superseded?

A: The Technical Specification was published in 2018 (edition 1) and was reviewed and confirmed by ISO in 2022; it remains the current ISO/TS edition as published in 2018.

Q: Is it part of a series?

A: Yes — it belongs to the ISO 22300 series on societal security and business continuity (ISO 22300 family), which includes ISO 22301, ISO 22313 and several ISO/TS guidance documents addressing specific BC topics.

Q: What are the key keywords?

A: Business continuity, people aspects, workforce resilience, BCMS, crisis communication, training, recovery, staff wellbeing, HR continuity.