One page per clause
The guidance in our words, the evidence a reviewer asks for, the common gaps and what to do before the second edition lands.
Open the registerWhat is organizational resilience under ISO 22316?
It is the ability of an organization to absorb and adapt in a changing environment, so that it can deliver its objectives and survive and prosper. It is a capability shaped by principles, attributes and activities, not a fixed state and not a certificate.
Last updated: . Written from the 2017 edition and the ISO record. Not legal advice; does not certify.
The definition and what it excludes
Absorb and adapt are both required. An organization that absorbs a shock and returns to the same operating model has continuity, not necessarily resilience. An organization that adapts without protecting its core service has change, not necessarily resilience. The definition keeps the two together.
The nine attributes
Shared vision and clarity of purpose; understanding and influencing context; effective and empowered leadership; a culture supportive of resilience; shared information and knowledge; availability of resources; development and coordination of management disciplines; supporting continual improvement; and the ability to anticipate and manage change. Each is a characteristic the organization can develop and evaluate.
The principles underneath
A shared vision, a current understanding of context, the ability to absorb and adapt, good governance, diversity of skills and experience, coordination across disciplines and effective risk management. The principles describe the conditions; the attributes describe what the organization shows.
What it is not
It is not a maturity score, a certification or a synonym for business continuity. The 2017 edition says an organization can only be more resilient or less so, and sets no absolute measure or final goal. That is why the assessment is a profile, not a pass mark.
Related clauses
Questions
Is resilience the same as risk management?
No. Risk management is one principle and one discipline. Resilience is the wider ability to absorb and adapt, which depends on leadership, culture, resources and coordination as well as risk work.
Can resilience be measured?
It can be evaluated against attributes and criteria the organization sets. It cannot be reduced to a single absolute score, and the standard says so.
Is business continuity enough?
No. Continuity protects delivery through a disruption. Resilience also asks whether the organization can adapt its strategy and operating model when the environment changes.
Run the free transition check / Open the register / The kit and the watch
THE RULES THIS IS BUILT FROM
Read from the real rules, not invented
Every clause answer on this site points to the official clause behind it, so you can check any line yourself. The register holds 41 records, 174 evidence lines and 123 common failure lines. The revision dates come from the ISO record, one national member body record and one reseller record. The clause substance comes from ISO 22316:2017, the published edition in force.
21 CLAUSE RECORDS
20 DISCIPLINES
Annex A, clearly labelled
Annex A is informative and names twenty management disciplines. Each page says so, because a finding cannot rest on guidance alone.
Open the annexONE STAGE RECORD
No invented date
Stage 50.00 is recorded on 6 July 2026. The planning date is an estimate and is labelled wherever it appears.
Read the recordThe FDIS text is not public and is not reproduced. The clause record covers the 2017 edition. No clause-level change in the FDIS is claimed. Where the public record is silent, the page says so.