Continual Improvement of a BCMS Based on ISO 22301
Improvement and nonconformity
Clause 10 requires determining opportunities for improvement and addressing nonconformities through correction, root-cause analysis, corrective action and review of effectiveness. Candidates must distinguish correction (fix the immediate issue) from corrective action (eliminate the cause so it does not recur). A frequent trap is a question describing a plan updated after an exercise-that is a correction; the corrective action addresses why the plan was wrong.
Nonconformity handling
Nonconformities must be reacted to, evaluated for cause, acted upon, and recorded with the actions taken. Retaining documented information as evidence is required. Traps include closing actions without verifying effectiveness and treating an incident as automatically a nonconformity-incidents may reveal nonconformity, but the BCMS response is what is assessed.
Continual improvement culture
Improvement draws on exercise lessons, audit findings, management review outputs, incident reviews, performance trends and changes in context. Maturity grows through progressive exercise difficulty, updated BIAs, and stronger supplier assurance. A trap is equating continual improvement with occasional large projects; the standard expects ongoing, planned improvement.
Worked example
Two exercises reveal that staff cannot reach the crisis team. Correction: publish a new contact card. Corrective action: introduce quarterly contact-data verification with an owner. Effectiveness check: next exercise shows contact success within target. This closes the loop properly.
Rule of thumb
For every nonconformity ask three questions: what did we fix, what caused it, and how do we know the fix worked? If the third answer is missing, the action is not closed.