Back to the library
Toolkit
Resilience

ISO 22301 business continuity starter kit

BIA workbook, RTO/RPO matrix, incident playbooks and a tabletop exercise script — everything to run a credible first BCMS cycle.

May 2026 Toolkit · 9 files By Karim Osman
Overview

BIA workbook, RTO/RPO matrix, incident playbooks and a tabletop exercise script — everything to run a credible first BCMS cycle.

Written by Karim Osman and pressure-tested on live resilience engagements before publication, this toolkit is designed to move a programme forward the same week you open it.

Every section is annotated with the decision it should unblock, the owner it should sit with, and the evidence it should leave behind — so the artefact still holds up under audit twelve months later.

What you'll take away
  • Field-tested against real Stage 1 and Stage 2 audit findings
  • Mapped to the controls and cadences the Resilience faculty deploy in cohort work
  • Editable, credit-line optional — use it inside your organisation without attribution
  • Includes evidence pointers, owner fields and a first-90-days cadence
Who this is for
  • Heads of GRC, CISOs, DPOs and internal audit leads
  • Lead Implementers and Lead Auditors preparing for cert cycles
  • Consulting teams standing up client programmes
See it live

Book a demo with the faculty who wrote this.

Walk through the toolkit with a MAST practitioner — mapped against your controls, your evidence and your next audit window.