Bank of Ireland Group has been awarded ISO 22301 certification for Business Continuity Management, following significant investment and resourcing in operational resilience.
The certification is a major milestone in the delivery of the Group’s strategy, which includes building a more resilient organisation focused on long‑term stability and preparedness.
The ISO 22301 certification follows a rigorous two‑year review of the Bank’s Business Continuity Management System (BCMS), focused on identifying critical services, reviewing key resources and interdependencies, assessing delivery risks, and ensuring robust, well‑governed response strategies with defined roles and effective communications. The certification was awarded by Amtivo, a globally recognised certification body, following a rigorous audit that verified Bank of Ireland’s full compliance.
Commenting, Glenn Attridge, Group Chief Information Security and Resilience Officer, Bank of Ireland said: “Achieving this certification is a significant endorsement of the strength and maturity of our business continuity framework. It clearly demonstrates our strategy in action, to be a more resilient company. This milestone reflects the dedication of teams across the organisation and reinforces our commitment to safeguarding our customers and ensuring the continuity of critical services in an increasingly complex risk environment.”
“Achieving ISO 22301 highlights an organisation’s dedication to excellence and continual improvement,” said Tom Crockford, Chief Operations Officer at Amtivo. “This certification reinforces Bank of Ireland Group’s commitment to excellence, continual improvement and meeting internationally recognised standards.”
ISO 22301 is the internationally recognised standard for business continuity management. Achieving certification confirms that Bank of Ireland has a structured and resilient BCMS in place, with well‑governed processes to anticipate, respond to and recover from disruptive events. It also recognises the Bank’s commitment to regular exercising, validation, ongoing monitoring and continual improvement to ensure preparedness for emerging threats and operational change.