International standard that provides a framework for organisations to develop, maintain and continually improve a documented management system to protect against, reduce the likelihood of, and ensure recovery from disruptive incidents.