ISO22301CERTIFICATION.COM
Europe / Country guide
ISO 22301 certification
in United Kingdom.
Finance, outsourcing, technology and public-service supply chains need to understand how important services withstand disruption. Local buyer expectations should inform the certification scope.
Secure Bridge connects you with independent providers. The appointed certification body conducts the audit and makes the certification decision.
Get Your Quote
Tell us about your organization and we will connect you with an independent certification body.
01 / Local context & requirements
Build a scope that reflects
your operations.
For a UK tender, check the named legal entity, contract activities, certificate scope and any accreditation conditions before applying. Where continuity requirements come from a regulated customer, understand the supplier obligations in the contract rather than assuming the customer’s full regulatory framework applies to every supplier.
Relevant continuity obligations
FCA operational-resilience rules apply to specified regulated firms and their important business services. Certification is not a substitute for assessing each applicable obligation.
Applicability depends on the entity and activities. A continuity obligation is not automatically an ISO certification mandate, and certification does not by itself establish regulatory compliance.
Industry considerations
in United Kingdom.
Financial services
Relate continuity arrangements to important business services and dependencies. For firms within the FCA rules, operational-resilience work needs its own assessment and evidence.
Technology and outsourcing
Map shared cloud platforms, service desks and subcontractors to the services promised to UK clients. Test how customer communication continues if the main support platform fails.
Construction and professional services
Include project information, premises, subcontractor availability and delegated decisions. A changing project portfolio may require updates to the BCMS scope and resource plans.
Illustrative exercise / not a client case study
Keeping an important service available during a supplier outage
Consider a UK business whose outsourced customer-support platform becomes unavailable. The exercise should follow the entire service: customer contact, prioritization, data access, operational decisions and return to normal working. Recovery of a server alone may leave the customer service disrupted.
Prepare the local evidence.
- Identify contract and tender conditions relevant to the requested certificate.
- Connect recovery arrangements to the services customers actually receive.
- Record which suppliers participate in exercises and how unresolved gaps are managed.
02 / Cities & operating locations
Plan around the locations
that deliver your service.
London and Edinburgh
Identify whether different entities, shared platforms or outsourced support arrangements need to be included in a single scope.
Manchester, Birmingham, Leeds and Bristol
For regional delivery teams, evaluate alternate staffing, communications and access to current customer or project information.
These locations help frame a scope discussion. They do not represent Secure Bridge offices or confirmed auditor locations. Mention your actual facilities, remote teams and overseas dependencies in the inquiry.
03 / ISO 22301 certification process
Your route to BCMS certification
in United Kingdom.
01
Scope & provider
Identify the legal entity, activities, sites, people and applicable certificate acceptance requirements.
02
Stage 1 audit
The body reviews documented arrangements and readiness for the implementation assessment.
03
Stage 2 & decision
Auditors assess implementation. The body separately reviews the outcome and decides certification.
04
Maintain & recertify
Maintain the BCMS, complete scheduled surveillance and plan recertification within the three-year cycle.
The first surveillance is within 12 months of the initial certification decision. The certification body sets the audit program; certification can be suspended or withdrawn before expiry.
04 / Audit duration & cost
What does ISO 22301 certification
cost in United Kingdom?
Request a scope-based quotation. Audit effort depends on activities, workforce, shifts, complexity, sites and the audit methods the body considers appropriate. A city name alone does not determine the price.
For a proposal in GBP, ask the provider to confirm the billing currency, applicable taxes, travel and expenses. Include Stage 1, Stage 2, surveillance and recertification when comparing the total three-year program. Any Secure Bridge service or referral arrangement should be clear in writing.
Preparation time and auditor-days are different. The body can estimate audit effort after reviewing your application; the time needed to implement and exercise your BCMS depends on your starting point.
Check the body before you appoint it.
Ask for its legal name, relevant accreditation scope, proposed certificate scope and verification route. Confirm your customer’s acceptance conditions before committing.
UAF or IAS references must be supported by the actual body’s current scope.
05 / Country questions
ISO 22301 in United Kingdom:
questions before you apply.
No. Certification assesses the BCMS within its scope. An in-scope firm must separately assess applicable FCA obligations, including the specific expectations for its important business services.
Yes, where those operations are included in the defined management system and accepted audit scope. The body assesses organizational control, activities and sites before agreeing the audit program.
Prepare your legal entity, business activities, workforce, shifts and locations. Include your customer or tender requirements, intended scope and timing. The body reviews the formal application and determines the audit program.
Match the legal entity, standard, scope, sites, dates and current status with the issuing body’s record. Check the accreditation scope and use IAF CertSearch where applicable. Resolve missing or conflicting information directly with the issuer.
Plan your ISO 22301 certification in United Kingdom
Share your scope, sites and timing — we will connect you with an independent certification body.
More country guides
Operating across borders?
Read the India guide ↗
CA / North America
Cross-province operations. Clear scope. Coordinated continuity.
Read the Canada guide ↗
Read the Australia guide ↗
Country content reviewed October 23, 2026. Standard reference: ISO 22301:2019. Browse all country guides.
ISO22301CERTIFICATION.COM