ISO 22301:2019 pdf download – Security and resilience — Business continuity management systems — Requirements.
3.21 organization person or group of people that has its own functions with responsibilities, authorities and relationships to achieve its objectives (3.20) Note 1 to entry: The concept of organization includes, but is not limited to, sole-trader, company, corporation, firm, enterprise, authority, partnership, charity or institution, or part or combination thereof, whether incorporated or not, public or private. Note 2 to entry: For organizations with more than one operating unit, a single operating unit can be defined as an organization. Note 3 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards. The original definition has been modified by adding Note 2 to entry. 3.22 outsource make an arrangement where an external organization (3.21) performs part of an organization’s function or process (3.26) Note 1 to entry: An external organization is outside the scope of the management system (3.16), although the outsourced function or process is within the scope. Note 2 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards. 3.23 performance measurable result Note 1 to entry: Performance can relate either to quantitative or qualitative findings. Note 2 to entry: Performance can relate to managing activities (3.1), processes (3.26), products (including services), systems or organizations (3.21). Note 3 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards. 3.24 policy intentions and direction of an organization (3.21), as formally expressed by its top management (3.31) Note 1 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards.
3.25 prioritized activity activity (3.1) to which urgency is given in order to avoid unacceptable impacts (3.13) to the business during a disruption (3.10) [SOURCE: ISO 22300:2018, 3.176, modified — The definition has been replaced and Note 1 to entry has been deleted.] 3.26 process set of interrelated or interacting activities (3.1) which transforms inputs into outputs Note 1 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards. 3.27 product and service output or outcome provided by an organization (3.21) to interested parties (3.15) EXAMPLE Manufactured items, car insurance, community nursing. [SOURCE: ISO 22300:2018, 3.181, modified — The term “product and service” has replaced “product or service” and the definition has been replaced.] 3.28 requirement need or expectation that is stated, generally implied or obligatory Note 1 to entry: “Generally implied” means that it is custom or common practice for the organization (3.21) and interested parties (3.15) that the need or expectation under consideration is implied. Note 2 to entry: A specified requirement is one that is stated, e.g. in documented information (3.11). Note 3 to entry: This constitutes one of the common terms and core definitions of the high level structure for ISO management system standards.