Alternative site and ISO 22301

During the first audit (Gap Analysis) for the standard (22301) it seemed that the alternative site is a must

Answer: No. An alternative site is not mandatory by ISO 22301, but what may happen is that the results of your business impact analysis may point out that your organization should consider it as a strategy to ensure business continuity in specific disaster scenarios.

In cases like these, if your organization decide to not adopt an alternative site as a business continuity strategy it should record this decision and the criteria adopted to support it.

This article will provide you further explanation about alternative sites:
- Business continuity for small businesses – necessity or not? https://advisera.com/27001academy/blog/2011/04/04/business-con tinuity-for-small-businesses-necessity-or-not/
- Disaster recovery site – What is the ideal distance from primary site? https://advisera.com/27001academy/knowledgebase/disaster-recovery-site-what-is-the-ideal-distance-from-primary-site/