Keep your methodology
Your services, your RTOs and RPOs, your plans and your own catalogues. ISO 27031 doesn't impose a methodology, and neither does GlobalSuite®.
ISO 27031 software so your technology holds up when it matters most
Know how long each system really takes to come back and whether that meets what the business needs. Dependencies, recovery tests, backups and ICT incidents in one place, linked to your continuity plan.
4.4 · 105 reviews on G2
2,000+ companies trust GlobalSuite®
Managing ISO 27031 in GlobalSuite®
What the standard asks for, what you've already done and what's still missing, all on one platform. Screens show sample data.
ISO 27031 isn't certified, it's a guideline. Each ICT readiness principle with its measures, their status and how far along they are.
ISO 27031 isn't certified, it's a guideline. Each ICT readiness principle with its measures, their status and how far along they are.
The tree from each process down to the infrastructure: if one database supports two critical services, you see it here.
This year's ICT test programme: recovery, restore and failover, each with its owner and status.
The RTO and RPO the business requires for each process, taken from its BIAs. Backups and recoveries are measured against them.
The AI reviews closed incidents and finds the ones that were fixed without removing the cause. It opens a problem for each, to be handled in the ICT continuity plan.
AI agent
Open problemsDismiss
✓ 2 problems openedAI technology can make mistakes.The Word and Excel templates for each report, filled in automatically with the platform's data.
Automate the compliance process
You set up the workflow once and GlobalSuite® repeats it: it requests, reminds, collects and updates. Your team only steps in when there's a decision to make.
- Assessment campaignsQuestionnaires sent to each control owner, with reminders until they reply.
- Expiring backupsIf a system's last good backup nears its RPO, infrastructure gets the task without anyone assigning it.
- Approval workflowsPolicies, accepted risks and exceptions, each with its sign-off and date.
- Everything recalculatesWhen a test or an incident is closed, each system's status against its RTO and the maturity are recalculated.
What you save when you drop spreadsheets
The reports are already done
Each system's status against its RTO, test results and the management report, up to date and ready to download.
AI does the first pass
Before each committee, the agent goes through the systems, finds those with no plan or recent test and drafts the plan. You just approve it.
Your ISO 27031 work counts towards other standards
Dependencies, tests and backups are the technology piece that ISO 22301, DORA and ISO 27001 also require. In GlobalSuite® you do them once and they count for all of them.
Our own estimate of how much of each standard is covered: each requirement counts in full if it is covered the same way and half if only partly. Each standard adds its own requirements.
ISO 22301
DORA
ISO 27001
Connected to the tools you already use
GlobalSuite® connects to your ecosystem via API. Data comes in on its own and nobody has to copy it by hand.
- Systems and dependenciesfrom your inventory or your CMDB
- Users and accessfrom Active Directory
- Plan actionsin your ticketing tool
- RTO, RPO and testsin Power BI or your data lake
Active Directory
Identity
Ticketing
CMDB
Power BI
Monitoring
Vulnerabilities
Data lake
Power BI
Monitoring
Vulnerabilities
Data lake
GlobalSuite® GRC PlatformModules
ISO 27031 lives in the Business Continuity module
And the module is part of the GRC platform. The BIA processes and systems are the same ones ISO 27031 uses, so the continuity plan and ICT recovery talk about the same thing.
If you're asked for ISO 22301 or DORA tomorrow, the technology part is already done.
Your goal: systems that come back on time
Your team leads the way. GlobalSuite® automates your management system and, if you need it, our consultants support you at whichever step you choose.
If you want help, our consultants are:Lead Auditor ISO 22301ICT recovery experts+2,000 projects
- Gap analysisYou measure ICT readiness for each principle and know where to start.
- ImplementationYou map processes to systems, set RTOs and RPOs and write the recovery plans.
- Management system automationEvidence, approvals, reminders and indicators run on their own in GlobalSuite®.
- AuditYou go into the internal audit and the committee review with the tests done.
Proven ICT readinessAnd every annual review, without starting from scratch.
What our customers have achieved
Financial services · Spain and Portugal
Implementing GlobalSuite® has made our business continuity management more efficient. We have strengthened our resilience and built more trust with all our stakeholders.
José María Parrilla RuizBusiness Continuity and Outsourcing Coordinator · UCI
- ISO 22301
- continuity plans ready for audit
- 100%
- of information without manual methods
Verified reviews on G2
Read all 105 reviewsIt covers all the necessary aspects to manage the bank's continuity. I highly value having the information asset inventory and the dependency tree in one place.
It has provided me with the ability to adjust my risk and business continuity model according to my needs.
Simple and focused on what matters. I implemented it in a large company (more than 30k employees across the world) in 2 months with the support of GlobalSuite consultants.
Shall we look at it with your risks and your methodology?
Request a demoResources for your ISO 27031 project
Rather see it with your own case? Request a demo →
Product sheetGlobalSuite® ContinuityBIA, plans, tests and crisis management for your BCMS in one place, with ISO 22301 preloaded.Download PDFDORARegulation (EU) 2022/2554
DORA Compliance: Prepare Your Business with These 5 Key Pillars
What DORA is, its key pillars and an action checklist.
Download the guideISO 27031 FAQs
Can't find your question? Tell us about your case and we'll answer it with your situation in mind.
Tell us about your caseCan you get certified to ISO 27031?
No. It's a guideline for getting ICT ready for business continuity, not a requirements standard. What you can do is show with tests that your systems come back on time, and that helps in an ISO 22301 or ISO 27001 audit.
How is it different from ISO 22301?
ISO 22301 is the business continuity management system for the whole company, and it can be certified. ISO 27031 goes into the detail of the technology: which systems support each process, how long they take to come back and how that is tested.
What are RTO and RPO?
RTO is the maximum time a service can be down. RPO is how much data you can afford to lose, measured as time since the last good backup. The business sets them and IT has to prove it can meet them.
Does it help with DORA?
It helps with ICT continuity and resilience testing. DORA also requires ICT third-party risk management, incident reporting and its own governance.
How often should recovery be tested?
It depends on how critical each system is. The usual practice is to test critical systems at least once a year and after every major change, and to keep the result as evidence.
Where does your
ICT continuity stand?
Tell us what you need and we’ll show you how GlobalSuite® solves it.