Home / ISO 27001 Glossary of Terms / ICT readiness for business continuity

ICT readiness for business continuity

13/09/2025

Author: Stuart Barker | ISO 27001 Expert and Thought Leader

ISO 27001 ICT readiness for business continuity is a rule within the ISO 27001 international standard. This rule makes sure that a company’s information and communication technology (ICT) systems are ready to deal with disruptions. It’s about planning ahead so that key systems can stay up and running, or be recovered quickly, in an emergency.

Examples

  • A backup data center: A company might have a second location with all its computer systems. If the main office has a power outage, they can switch to the backup data center to keep working.
  • Regular system tests: The company might pretend there’s an emergency to see if its recovery plan works. They might test restoring data from a backup tape to make sure it’s possible.
  • Having a contact list: A list of people to call during an emergency is important. This includes IT staff, suppliers, and emergency services.
  • Using a cloud service: Storing important files and programs on a cloud service like Google Drive or Dropbox can help. If a local computer breaks, the files are still safe and can be accessed from another device.

Context

This control is a key part of a company’s business continuity plan. Business continuity is about making sure a business can keep going no matter what happens. The “ICT Readiness” part focuses specifically on the technology side of things. It ensures a company can keep using its computers, networks, and data during and after an event like a natural disaster, a fire, or a cyber-attack. It’s about being prepared so the business can quickly get back to normal operations.

Relevant ISO 27001 Controls

The following controls from the ISO/IEC 27001:2022 standard are related to ICT readiness for business continuity:

About the author

Stuart Barker is an information security practitioner of over 30 years. He holds an MSc in Software and Systems Security and an undergraduate degree in Software Engineering. He is an ISO 27001 expert and thought leader holding both ISO 27001 Lead Implementer and ISO 27001 Lead Auditor qualifications. In 2010 he started his first cyber security consulting business that he sold in 2018. He worked for over a decade for GE, leading a data governance team across Europe and since then has gone on to deliver hundreds of client engagements and audits.

He regularly mentors and trains professionals on information security and runs a successful ISO 27001 YouTube channel where he shows people how they can implement ISO 27001 themselves. He is passionate that knowledge should not be hoarded and brought to market the first of its kind online ISO 27001 store for all the tools and templates people need when they want to do it themselves.

In his personal life he is an active and a hobbyist kickboxer.

His specialisms are ISO 27001 and SOC 2 and his niche is start up and early stage business.