ESGComplete

Compliance guide

Business Continuity Policy Template

A business continuity policy is the short governance document that states your commitment to staying operational through disruption, and sets the rules for how continuity is managed. It sits above the detailed plan. Use the free template below, or have one prepared for you. Looking for the operational plan instead? See the business continuity plan template.

Get it done for you->See the template

Last updated

Key takeaways

  • A business continuity policy is a one-to-two page statement of intent and governance, not the plan itself.
  • The policy says what you commit to and who's accountable; the plan says exactly what you'll do.
  • It typically references ISO 22301 and points to the underlying business continuity plan.
  • It's often what an auditor or tender first asks to see, before the detailed plan.

Policy vs plan: what's the difference?

These two get confused constantly, but they do different jobs:

  • Business continuity policy, the short, board-level statement: your commitment to continuity, the principles you follow, roles and accountability, and how the programme is governed and reviewed.
  • Business continuity plan (BCP), the operational detail: critical activities, recovery objectives, scenarios and step-by-step response.

If you only have time for one right now, build the plan, that's the document that actually keeps you running. But a short policy on top signals governance maturity and is often requested first in audits and tenders.

This is general guidance, not professional advice. A business continuity management system (BCMS) aligned to ISO 22301 will usually have both a policy and a plan.

What a business continuity policy should cover

Keep it tight. A strong policy fits on one or two pages and includes:

  1. Purpose, why the business maintains continuity arrangements.
  2. Scope, the activities, sites and people it applies to.
  3. Commitment, a clear statement of intent from leadership.
  4. Objectives, what the continuity programme aims to achieve.
  5. Roles and accountability, who owns continuity and who's responsible for the plan.
  6. Approach, how you assess impact and risk and maintain the plan (referencing ISO 22301 if relevant).
  7. Review, how often the policy is reviewed and approved.
  8. Related documents, a pointer to the business continuity plan and supporting procedures.

Download the business continuity policy template

Enter your email and we'll send the editable policy template (Word and PDF), short, governance-ready, and easy to approve.

How to put your policy in place

A continuity policy is quick to adopt once the wording is right.

  1. 1

    Start from the template

    Use the structure above and drop in your business name and scope.

  2. 2

    Set your commitment and objectives

    Agree what leadership is committing to and what the programme aims to achieve.

  3. 3

    Assign accountability

    Name who owns continuity at board level and who maintains the plan.

  4. 4

    Link to the plan

    Reference your business continuity plan so the two stay connected.

  5. 5

    Approve and review

    Get sign-off and set a review date, at least annually.

Frequently asked questions

Is the business continuity policy template free?+
Yes. The structure and guidance are free to use. The only paid option is a tailored, done-for-you policy and plan package.
Do I need a policy if I already have a plan?+
You can operate with just a plan, but a short policy on top demonstrates governance and accountability, which auditors and procurement teams increasingly look for. They complement each other.
How long should a business continuity policy be?+
One to two pages. It's a statement of intent and governance, the detail belongs in the plan, not the policy.
Does it need to mention ISO 22301?+
Not necessarily. ISO 22301 is the international standard for business continuity management; referencing it signals alignment, but you can have a perfectly good policy without certification.

Prefer your continuity documents done for you?

We can prepare a matching business continuity policy and plan, tailored to your business and ready to approve.

Requests for the business continuity policy are reviewed and prepared manually, we'll follow up by email.

Related guides

Business Continuity Plan Template->The operational plan behind the policy.Business Continuity Plan Examples->Worked scenarios and sample responses.Cyber Security Policy Template->A common partner policy in security reviews.