- ISO 22000 - Food Safety Management System
- ISO 27001 - Information Security Management System
- ISO 22301 - Business Continuity Management System
- ISO 17025 - Testing and Calibration Laboratories
- ISO 56001 - Innovation Management System
- ISO 10002 - Customer Satisfaction & Complaint Management
- AS 9100 - Aerospace, Space & Defense Quality Management System
- GDP - Good Distribution Practice
- GMP - Good Manufacturing Practice
- IATF 16949 - Automotive Quality Management System
- AS 9100 – Aerospace, Aviation and Defense Quality Management System
- AQAP 2310 – NATO Quality Management System Requirements
- AQAP 2110 – NATO Quality Assurance Requirements
ISO 22301 - Business Continuity Management System
Companies that can maintain their operations in the face of unexpected crisis scenarios—such as a pandemic, earthquake, flood, fire, cyberattack, or the bankruptcy of a critical supplier—gain a lasting competitive advantage over their rivals. ISO 22301:2019 ensures that organizations are prepared for such disruptions, can restore critical processes within defined timeframes, and provide uninterrupted confidence to stakeholders. A&A Consulting’s business continuity consulting goes beyond simply generating a list of abstract risk scenarios. Instead, it establishes a continuity management system that is tested through real-world drills, owned by management, and kept up-to-date through regular updates.
As part of the Business Impact Analysis, the duration within which the stoppage of specific processes would result in critical loss is calculated; the RTO (Recovery Time Objective) and RPO (Recovery Point Objective) are determined. Business disruption scenarios are prioritized based on a probability and impact matrix; step-by-step intervention and recovery procedures are prepared for each critical process. Backup, failover, and data recovery strategies are designed for IT systems. Plans are established in advance for how employees, customers, and the media will be informed during a crisis. Tests ranging from tabletop exercises to full-scale field drills are conducted; a supplier continuity plan is created that includes alternative options for critical suppliers in the event of an outage.