Business continuity and crisis management

Answer:

Yes, crisis management is included in the Business continuity plan template, which is part of our ISO 22301 Documentation Toolkit - https://advisera.com/27001academy/iso22301-documentation-toolkit/

Theoretically speaking, crisis management and business recovery are separate processes, but it is better if they work together, because during the larger crisis you will probably need to recover your business operations, and to recover business operations without crisis management would be very difficult.

If there are a small incident which affect the availability of an information system in a department, probably you will need the BCP (without CM). But if there is an earthquake and all departments of the main facility cannot work, you will need to mana ge a crisis, and for this, among other things, probably you will need a BCP.

Just to mention that crisis management is not explicitly mentioned in ISO 22301, but it is de facto required through clauses 8.4.2 Incident response structure, and 8.4.3 Warning and communication.