BC strategy and ISO 9001

1 - How does BC strategy fits into an ISO 9001 certified company?

Answer: The BC strategy in an ISO 9001 certified company needs to be considered during the planning and creation of the product or service, because it is related to how an organization will ensure its recovery and continuity (i.e., keeping delivering its product or service) in the face of a disaster or other major incident or business disruption (e.g., pandemic). It covers general decisions like the use of alternative sites, redundancy on suppliers, etc., which will affect the need for resources.

For further information, see (ISO 22301 is the leading ISO standard for business continuity management):
- Can business continuity strategy save your money? https://advisera.com/27001academy/blog/2010/03/15/can-business-continuity-strategy-save-your-money/

- ISO 22301 Case study in the travel industry: Business continuity as a necessity in customer care https://advisera.com/27001academy/blog/2016/11/07/iso-22301-case-study-in-the-travel-industry-business-continuity-as-a-necessity-in-customer-care/
- How to use ISO 22301 to continue operations during the pandemic [free webinar on demand] https://advisera.com/27001academy/webinar/how-to-use-iso-22301-to-continue-operations-during-the-pandemic-free-webinar-on-demand/

2 - What is the impact on QMS Supply chain CRISIS, sales, training and communication, etc., if you have or not BC strategy?

Answer: To define a business continuity strategy a company needs to think upfront about potential impacts that can arise from disruption of its operations, so the main impacts for a company that has a BC strategy are:

- processes for delivering products and services are more robust and less prone to situations that can lead to a disruption (if you already have considered where major impacts can happen, then you can work on how to prevent situations that can lead to them).
- it makes its response time quicker in case of disruption because people will already know what to do.  

For further information, see:
- Enabling communication during disruptive incidents according to ISO 22301 https://advisera.com/27001academy/blog/2016/12/19/enabling-communication-during-disruptive-incidents-according-to-iso-22301/

3 - How should I convince my CEO on its importance/ (to my knowledge we don't have a documented BC Plan) Thank you for clarification and presenting this topic.

Answer: To obtain support from top management to implement a BC strategy, it is very important to show the benefits of such implementation, which basically are:
- less effort in the compliance process, and fewer penalties to be paid.
- marketing advantage
- reducing dependency on individuals
- prevention of large-scale damage 

Since you are already ISO 9001 certified, and BC strategy is only one part of business continuity, you should consider integrate in your QMS practices from ISO 22301. ISO 9001 and ISO 22301 have many common requirements, so this integration is possible.

For further information, see:
- ISO 22301 benefits: How to get your management’s approval for a business continuity project https://advisera.com/27001academy/knowledgebase/wledgebase/iso-22301-benefits-how-to-get-your-managements-approval-for-a-business-continuity-project/
- How to implement integrated management system https://advisera.com/articles/how-to-implement-integrated-management-systems/