ISO 22333 Revision CheckerISO/DIS 22333
Draft stage
40.60, close of voting
Voting closed
20 June 2026
Publication estimate
16 September 2027, an estimate
Certificate basis
ISO 22301:2019, unchanged

Stage 40.60, voting closed 20 June 2026. Publication estimate 16 September 2027, an estimate. Certificate basis ISO 22301:2019, unchanged.

01Position02Processes03Impact and risk04Strategies05Plans06Exercises07Evaluation08Audit and improvement
10.2 requirement Improvement

Continual improvement

Keep making the BCMS more suitable, adequate and effective, using qualitative and quantitative evidence from analysis, evaluation and management review.

01What applies

Keep making the BCMS more suitable, adequate and effective, using both qualitative and quantitative measures, and use what analysis and evaluation show, together with what management review produces, to decide whether business or BCMS needs and opportunities have to be dealt with as part of improvement. The clause expects improvement to be driven by evidence and by business need, not only by corrective action. It also expects qualitative signals, such as exercise observations and near misses, to sit beside the numbers.

02Why it matters

A BCMS that only changes after something breaks is reactive by design. The clause asks for a deliberate improvement agenda, informed by what the exercises, the audits and the business strategy show. It also asks the organization to consider its own changing needs, so the BCMS improves against the business rather than against itself.

03What good looks like

Keep one improvement backlog with the source of each item: audit, exercise, evaluation, management review or business change. Include qualitative items. Give each an owner and a decision date. Report the items delivered, not only opened. Read the backlog with the business plan so the BCMS moves with the organization.

04Evidence an auditor asks for

Ask for an improvement that did not start as a problem. If there is none, the BCMS is only correcting, not improving.

EvidenceThe record
BacklogImprovement register traceable to analysis, evaluation or management review
MeasuresBoth qualitative and quantitative measures in use
DeliveryEvidence of improvements delivered over successive cycles
Business linkA link from business change into the improvement determination

05Where it commonly fails

  • Improvement evidenced only by corrective actions
  • Quantitative measures only, missing qualitative signals
  • An improvement register that accumulates items and closes none

06What to do before the estimate

Open the backlog with three items from the last exercise and one from the business plan. Give each an owner and a date.

07Read across

Full register / The dates / Free check