ISO 22301 Clause 7.2 Competence

Definition of Competence

ISO 22301 is a standard that outlines the requirements for implementing and maintaining a Business Continuity Management System (BCMS). The term "competence" is mentioned in several clauses of the standard.

In ISO 22301, competence is applying knowledge and skills to achieve intended results. Specifically, Clause 7.2 of the standard outlines the requirements for competence, stating that an organization must:

• Determine the necessary competence for personnel performing work affecting the BCMS.
• Ensure that personnel are competent based on appropriate education, training, or experience.
• Maintain records of education, training, skills, and experience.

 This clause emphasizes the importance of having competent personnel to ensure the effectiveness of the BCMS. By having qualified personnel, an organization can identify and respond to disruptions promptly and effectively, which helps minimize the impact on the organization and its stakeholders.

Types of Competence

ISO 22301:2019 is a standard that provides requirements for establishing, implementing, maintaining, and continually improving a Business Continuity Management System (BCMS). Clause 7.2 of the standard focuses on the competence of people involved in the BCMS. The standard identifies four types of competencies required for BCMS personnel:

• General competencies: These are the essential competencies that all BCMS personnel should have, including knowledge of business continuity concepts, the organization's BCMS policy, and the roles and responsibilities of personnel in the BCMS.
• BCMS-specific competencies: These are the competencies required for the effective operation of the BCMS. This includes knowledge of the organization's BCMS objectives, risk assessment and analysis procedures, and techniques for developing and maintaining business continuity plans.
• Technical competencies: These are required for the specific tasks that personnel perform within the BCMS. This includes skills related to information technology, communication systems, and emergency response procedures.
• Behavioral competencies: Behavioral competencies are related to personal qualities and characteristics that enable them to work effectively in the BCMS. This includes skills related to communication, leadership, and teamwork.

Organizations need to ensure that all personnel involved in the BCMS possess these competencies to ensure the effective implementation of the BCMS and to enhance the organization's resilience to disruptions.

How to understand the Competences

Clause 7.2 of ISO 22301 specifies the competence requirements for those involved in implementing and maintaining a business continuity management system (BCMS). This clause requires that the organization identify the necessary competence for personnel engaged in the BCMS and ensure that they possess the required knowledge and skills to carry out their roles effectively.

To comply with this requirement, the organization should consider the following:
Identify the roles and responsibilities related to the BCMS and determine the necessary competence for each position. Provide appropriate training and development opportunities to enhance the knowledge and skills of personnel involved in the BCMS.

Evaluate the effectiveness of training and development activities and provide feedback to personnel to improve their performance. Ensure that personnel have the necessary experience to perform their roles effectively. Maintain records of personnel competence, training, and development. It's important to note that competence is not limited to technical knowledge and skills but includes leadership, communication, and teamwork attributes. Therefore, the organization should ensure that personnel possess the necessary qualities to perform their roles effectively.

Overall, compliance with clause 7.2 requires that the organization has a structured approach to identify, develop, and maintain the competence of personnel involved in the BCMS. This ensures that the BCMS is effectively implemented and maintained, which is essential for achieving the intended outcomes of the standard.

What are the benefits of competencies?

ISO 22301 is a standard that provides a framework for implementing and maintaining a Business Continuity Management System (BCMS) in an organization. Clause 7.2 of the standard outlines the requirements for the competence of personnel involved in the BCMS. The benefits of competencies in ISO 22301 Clause 7.2 are:

• Improved effectiveness of the BCMS: Competent personnel can perform their roles and responsibilities effectively, leading to the overall point of the BCMS.
• Increased confidence: Competent personnel have the confidence to carry out their roles and responsibilities, which translates to a higher confidence level in the BCMS.
• Enhanced decision making: Competent personnel are better equipped to make informed decisions promptly, which can help minimise disruptions’ impact on the organisation.
• Reduced risk: When competent personnel can better identify and mitigate risks to the BCMS, reducing the likelihood of disruptions.
• Continuous improvement: Competent personnel can identify opportunities for improvement in the BCMS and implement them effectively.

Overall, having competent personnel in the BCMS ensures that the organization is prepared to respond to and recover from disruptive events.

How to Get Started with Competences

ISO 22301 is a standard for Business Continuity Management Systems (BCMS). Clause 7.2 of ISO 22301 addresses the competence of personnel involved in the BCMS. Here are the steps to get started with competencies in ISO 22301 clause 7.2:

• Identify the Competences Required: Determine the competencies required for each role within the BCMS. This may include technical skills, knowledge of business continuity principles, and soft skills such as communication and leadership.
• Assess Current Competences: Conduct a gap analysis to identify existing personnel’s competencies in the BCMS roles. This will help identify any gaps that need to be addressed.
• Develop a Training Plan: To address any competency gaps, develop a training plan. This may include training programs, on-the-job training, coaching, and mentoring.
• Implement the Training Plan: Implement the training plan to ensure that personnel acquire the required competencies. This may involve scheduling training sessions, assigning mentors, and monitoring progress.
• Evaluate the Effectiveness: Evaluate the effectiveness of the training program to ensure that personnel have acquired the required competencies. This may involve conducting assessments, surveys, and interviews.
• Continual Improvement: Continuously monitor and improve personnel competencies within the BCMS. This may involve regular assessments, updating training programs, and providing ongoing support to personnel.

By following these steps, you can ensure that personnel within the BCMS have the competencies to effectively manage business continuity risks and maintain your organization's resilience.

Conclusion:

In conclusion, the competencies outlined in clause 7.2 of ISO 22301 are essential for individuals involved in the BCMS to effectively implement, maintain, and improve the organization's business continuity management system. These competencies include business continuity management knowledge, BCMS implementation and operation skills, communication and interpersonal skills, training and awareness skills, and problem-solving and decision-making skills.