ISO 22301 BC Technical Layer · Honest Scope
Emirtech delivers the technical-control layer that supports an ISO 22301:2019 Business Continuity Management System (BCMS) — redundant infrastructure, 3-2-1 backup, replication, DR site setup, and failover drills for Abu Dhabi customers. We are not an ISO 22301 lead-implementer or BCMS consultancy.
Get a free site survey Talk to a specialist
In short: This page covers “ISO 22301 Business Continuity Technical Layer” from the technical side, with honest scope. Emirtech installs and configures systems; it is not an auditor, certification body or legal adviser, so confirm the standard or regulation with the relevant authority, auditor or adviser.
| Who provides it? | Emirtech Technology, based at M44, Mussafah Industrial Area, Abu Dhabi, in operation since 2018. The work is carried out by Emirtech's own engineers. |
|---|---|
| Where? | Abu Dhabi and Al Ain, served from Emirtech's Mussafah, Abu Dhabi base; there is no Al Ain office. In Dubai: IT AMC and time attendance by scheduled on-site visits, gate barriers, ANPR, video intercoms and turnstiles by Emirtech itself; CCTV, alarm and access control through SIRA-approved partners, with Emirtech coordinating. |
| What is covered | ISO 22301 Business Continuity Technical Layer. |
| Survey and quotation | Emirtech publishes no price list: it surveys or assesses first and then gives a written, itemised quotation. |
| Credentials | Emirtech is an independent systems integrator. It holds no manufacturer-level credential of its own, and its ADMCC approval covers security systems only, not IT services. |
| Please note | General information, not legal, audit or certification advice. Emirtech is not an auditor, certification body or legal adviser; confirm the standard or regulation with the relevant authority, auditor or adviser. |
| Last reviewed | 21 October 2026 |
Emirtech Technology is an electronic security and ICT integrator (ADMCC-approved for security systems) founded in 2018, operating from M44, Mussafah Industrial Area, Abu Dhabi, contactable on +971 55 651 7843. For ISO 22301:2019, we deliver the technical-control layer that operationally underpins a Business Continuity Management System (BCMS) — we do not deliver the management-system documentation, nor do we act as a BCMS consultancy. Our technical scope covers redundant infrastructure (HA clusters, dual power, dual uplink, Veeam Backup and Replication, Dell PowerProtect appliances), 3-2-1 backup architecture with off-site copies (one local, one secondary on-prem or NAS, one cloud or geographically separate copy), cloud-based business-continuity backup for Microsoft 365 / Entra ID (Veeam Backup for M365, AvePoint, Acronis Cloud), Azure Site Recovery (ASR) orchestrated DR, synchronous and asynchronous replication (VMware vSphere Replication, Hyper-V Replica, storage-array based replication), DR site setup (warm-standby or cold-standby topology in a separate Abu Dhabi facility or UAE-region cloud), and a technical runbook for failover/failback with documented RPO and RTO targets measured during testing. We participate in DR drills as the technical execution party — actual failover, verification, rollback, and evidence capture — and provide technical input into tabletop exercises run by the customer or their BCMS consultant. We are not an ISO 22301 lead-implementer or lead-auditor, hold no PECB, IRCA, or BCI certification as an organisation, and do not issue ISO 22301 certificates — that is the role of an accredited certification body such as BSI, DNV, TÜV SÜD, or Bureau Veritas engaged separately by the customer. We are not the customer's Business Impact Analysis (BIA) author, BCP documentation owner, or internal BCMS auditor. Our work is the engineering layer: infrastructure that survives a disruption and recovers within agreed RPO/RTO. Call +971 55 651 7843 or email [email protected] to discuss a BC technical-layer scope for your Abu Dhabi site.
Core BC technical capabilities we deliver
HA clusters (VMware vSAN, Hyper-V failover cluster, Proxmox HA), dual-PSU servers, dual uplinks, redundant top-of-rack switching, and UPS plus generator coordination, engineered to survive single-component failure without service outage.
Three copies of data, on two media, with one off-site — implemented using Veeam Backup and Replication, Dell PowerProtect Data Manager, or Acronis, with immutable repositories, air-gapped copies where required, and tested restore evidence.
Synchronous or asynchronous replication (vSphere Replication, Hyper-V Replica, Azure Site Recovery, storage-array replication) into a warm-standby or cold-standby DR site in a separate facility or UAE-region cloud, with documented RPO targets.
Technical runbook covering failover, verification, rollback, and evidence capture; participation in customer-led DR drills as the engineering execution party; measurement of actual RPO and RTO achieved versus targets agreed in the BCP.
Scope is fixed against your BCP document, RPO/RTO targets, and recovery-tier classifications. We engineer the technical layer and provide drill evidence; your BCMS consultant or in-house BC lead retains ownership of the management system, BIA, and certification engagement. Call +971 55 651 7843 or request a free ISO 22301 technical-layer consultation.
Where the technical layer fits in the BCMS
BIA, risk assessment, BCP document, management review, internal audit, and certification engagement remain with the customer or their appointed BCMS consultant. We do not author or own these — we consume RPO/RTO targets and recovery tiers from them.
Infrastructure, backup, replication, DR site, runbook, and drill execution — designed and built to meet the RPO/RTO targets the BCP specifies. Our scope is bounded, measurable, and evidenced through drill reports and restore logs.
Backup success/failure logs, restore test evidence, replication health reports, failover drill reports with timestamps, RPO/RTO measurement records, and runbook revision history — packaged for the BCMS internal audit or external certification body.
We will not sign off the BCP, conduct the BIA, run management review, perform internal BCMS audit, or pose as an ISO 22301 lead-implementer or lead-auditor. Those roles sit with accredited consultancies and certification bodies engaged by you.
ISO 22301:2019 is a management-system standard. Most of its clauses are management, documentation, and governance — areas that sit with a BCMS consultant or in-house BC manager. A smaller, critical portion is the technical resilience that lets the organisation actually recover. That technical layer is our scope. Below is the honest split.
If you already have a BCMS consultant or internal BC lead, we slot in as the engineering partner. If you don't, we will say so clearly and recommend you engage an accredited consultancy or certification body for the management-system work, while we scope the technical layer separately.
Common questions
No. Emirtech is not an ISO 22301 lead-implementer, lead-auditor, or accredited BCMS consultancy. We hold no PECB, IRCA, or BCI certification as an organisation, and we cannot issue ISO 22301 certificates. We deliver the technical-control layer only — HA, backup, replication, DR site, runbook, drills — to support a BCMS owned by your consultant or in-house BC lead.
No. BCP authorship, Business Impact Analysis, risk assessment, and BCMS policy writing sit with an accredited BCMS consultancy or your internal BC manager. We consume the recovery objectives (RPO, RTO) and recovery tiers from your BCP and engineer the technical layer to meet them — we do not author the management-system documents.
Depends on workload tier and budget. Tier-1 (synchronous storage replication) can achieve RPO close to zero and RTO of minutes. Tier-2 (asynchronous replication or Azure Site Recovery) typically delivers RPO of 15 minutes to a few hours and RTO of 1 to 4 hours. Tier-3 (backup-based recovery) targets RPO of 24 hours and RTO of 4 to 24 hours. Actual figures are measured during drills.
Yes. We deploy Veeam Backup for Microsoft 365, AvePoint, or Acronis Cloud to back up Exchange Online, SharePoint Online, OneDrive, Teams, and Entra ID configuration (Entra ID coverage depends on the product chosen). Retention, restore tests, and audit evidence are part of the deliverable, aligned to the recovery tiers in your BCP.
Yes. We execute the technical portion of scheduled DR drills — failover, verification, application smoke-test, rollback, RPO/RTO measurement — and produce a drill report with timestamps, deviations, and remediation actions. The report is suitable for inclusion in your BCMS internal audit and external certification evidence pack.
Call +971 55 651 7843 or email [email protected] with your current BCP (or a summary of recovery objectives and tiers), workload inventory, and preferred DR target (on-prem secondary site, Azure UAE region, or hybrid). We will issue a fixed-scope quotation. Start at our quotation page.
ISO 22301 BC Technical Layer · Honest Scope
Free site survey · transparent scope · honest costs · ADMCC-approved for security systems · Mussafah M44 home base since 2018.
Need a free Abu Dhabi site visit? Call +971 55 651 7843 or email [email protected] — we reply the same working day across Abu Dhabi and Al Ain.