# ISO 22301 Risk Assessment > Structured risk and opportunity assessment aligned with ISO 22301, helping organisations assess threats, capitalise on strengths, and prioritise actions for business continuity planning. *This content is available in full at: https://www.fixinc.io/disciplines/iso223012019-risk-and-opportunity-assessment* Resilience is not limited to managing risk. It includes identifying opportunity. This module aligns continuity planning with ISO 22301 by helping organisations assess risks, capitalise on strengths, and prioritise actions that matter under pressure. ## Delivery Approach Fixinc delivers ISO 22301 Risk and Opportunity Assessment through a four-step Plan-Do-Check-Act methodology: 1. **Plan**: Agile, first-principles planning ensures a smooth rollout of your refreshed programme 2. **Do**: Structured implementation to roll out ISO 22301 Risk and Opportunity Assessment smoothly within your organisation 3. **Check**: Validation of draft assessments through review and testing processes 4. **Act**: Preparation for real-world activation with your team and Fixinc advisors ## Assessment Scope Fixinc leads a structured review of your operational and strategic risk environment, identifying threats that could disrupt continuity and opportunities that could strengthen resilience. The review covers: - Internal gaps and capability assessments - Supplier risk evaluation - Regulatory shifts and compliance exposure - Reputation exposure analysis All assessments are conducted through the lens of ISO 22301 requirements. This module helps position continuity as a business advantage, not just a control function. ## Methodology Fixinc does not copy-paste enterprise risk registers into business continuity plans. The approach draws a clear line between business risk and continuity exposure, so your response is based on what is actually likely and impactful. Practical frameworks are used that hold up under audit and help your team think strategically, not just defensively. ## Engagement Process ### Initial Consultation - A link will be sent via email from the Advisory team - Choose a convenient time for phone, Teams, Zoom, or in-person discussion - 30-45 minute session to discuss objectives with prepared questions - Overview of Fixinc's approach and opportunity for questions ### Proposal and Quote - Proposal delivered within 24 hours detailing scope of work - Discussion scheduled one week after proposal delivery - Final quote provided within 10 minutes of discussion completion - Five-week decision window before proposal expires ### Delivery Phases **Review and Health Check**: All ISO 22301 Risk and Opportunity Assessments begin with a deep review of existing arrangements. Benchmarks are established from best practice and ISO standards. **Design and Develop**: With appropriate involvement from your team, Fixinc builds out the risk and opportunity assessment component to the highest quality standards available. **Validate**: Where appropriate, testing and validation provides tangible evidence of capability and maturity to stakeholders. **Maintain**: A plan is built to ensure your risk and opportunity assessment runs annually, addressing the primary setback for organisations embedding resilience: maintaining momentum. ## Related ISO 22301 Disciplines Expand your ISO 22301 Risk and Opportunity Assessment with additional disciplines: - [ISO 22301 Gap Assessment](https://docs.fixinc.io/disciplines/iso-22301-gap-assessment.md): Clear, detailed view of ISO 22301 compliance status mapped against every clause and obligation - [ISO 22301-Aligned BIA Review](https://docs.fixinc.io/disciplines/iso22301aligned-bia-review.md): Reviews existing Business Impact Analysis and aligns it to ISO 22301 structure and audit criteria - [BCMS Policy and Framework Review](https://docs.fixinc.io/disciplines/bcms-policy-and-framework-review.md): Reviews and sharpens BCMS policy and framework for ISO 22301 alignment - [ISO 22301 Evidence Gathering Workshop](https://docs.fixinc.io/disciplines/iso223012019-evidence-gathering-workshop.md): Guidance on collecting, documenting, and structuring evidence for ISO auditors - [ISO 22301 Internal Audit Support](https://docs.fixinc.io/disciplines/iso223012019-internal-audit-support.md): Supports internal audit process with structure, independence, and clear path to action - [ISO 22301 Audit Readiness Walkthrough](https://docs.fixinc.io/disciplines/iso233012019-audit-readiness-walkthrough.md): Preparation for audit process including evidence, responses, and assessor engagement - [ISO 22301 Corrective Action Implementation Support](https://docs.fixinc.io/disciplines/iso223012019-corrective-action-implementation-support.md): Implements corrective actions quickly, clearly, and sustainably - [ISO 22301 Documented Information Review](https://docs.fixinc.io/disciplines/iso223012019-documented-information-review.md): Reviews documented information for structure, control, and audit clarity - [ISO 22301 Post-Audit Resilience Improvement Plan](https://docs.fixinc.io/disciplines/iso223012019-postaudit-resilience-improvement-plan.md): Transforms audit results into actionable improvement plans ## Frequently Asked Questions **What outcomes can we expect from ISO 22301 Risk and Opportunity Assessment?** Clients typically gain clarity, leadership alignment, and a measurable shift in preparedness through delivery, regardless of starting point. **How do we know when our assessment activity is fully effective?** Success is validated through exercises, engagement, and outcomes. If your risk and opportunity assessment effort drives action, conversation, and continuous use, it is working. **Does this link to other services or tools offered by Fixinc?** Yes. ISO 22301 Risk and Opportunity Assessment often feeds into other services like planning, validation, or digital tools. It is designed to integrate, not sit in a silo. **What does this discipline involve when delivered by Fixinc?** The discipline is built to be clear, structured, and aligned with the Tungsten Diamond lifecycle. It is tailored to your programme maturity and backed by real-world application. **How is this different from traditional approaches?** Unlike templated models, Fixinc's approach adapts to the client's sector, stakeholders, and risk profile. It is hands-on, flexible, and always validated. --- **View this page online:** https://www.fixinc.io/disciplines/iso223012019-risk-and-opportunity-assessment For program inquiries: [Contact Fixinc](https://www.fixinc.io/contact) | info@fixinc.org | +64 800 349 462