EN 1090 vs ISO 22301
EN 1090
European standards for steel and aluminium structural execution
ISO 22301
International standard for business continuity management systems.
Quick Verdict
EN 1090 mandates CE marking for structural steel/aluminium in EU construction via FPC and execution classes, while ISO 22301 builds voluntary BCMS resilience against disruptions. Fabricators adopt EN 1090 for market access; all firms use 22301 for operational continuity and trust.
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Risk-based Execution Classes (EXC1–EXC4) scaling requirements
- Mandatory Factory Production Control (FPC) certification
- Enables CE marking under CPR for structural components
- Detailed technical rules for steel (EN 1090-2) execution
- Welding quality integration with ISO 3834 standards
ISO 22301
ISO 22301:2019 Business continuity management systems — Requirements
Key Features
- PDCA cycle for continual BCMS improvement
- Business Impact Analysis (BIA) and risk assessment
- Leadership commitment with BCMS policy
- Operational planning, strategies, and testing
- Annex SL alignment for ISO 27001 integration
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1/2/3) for execution and conformity assessment of structural steel and aluminium components under the Construction Products Regulation (CPR). It provides a risk-based framework enabling CE marking for load-bearing components in construction works.
Key Components
- **EN 1090-1Conformity assessment, Factory Production Control (FPC), Declaration of Performance (DoP).
- **EN 1090-2/3Technical requirements for steel/aluminium execution (materials, welding, tolerances, inspection).
- **Execution Classes (EXC1-4)Scales controls by consequence, service, production categories.
- Certification via Notified Body audits and ongoing surveillance.
Why Organizations Use It
Mandated for EU market access; reduces liability, ensures traceability, improves weld quality. Builds stakeholder trust, enables high-risk projects, aligns with ISO 3834 for welding.
Implementation Overview
Phased: gap analysis, FPC development, welding qualification, NB certification (3-12 months). Applies to fabricators in EU/EEA; involves training, digital traceability, surveillance.
ISO 22301 Details
What It Is
ISO 22301:2019 is the international standard for establishing, implementing, maintaining, and improving a Business Continuity Management System (BCMS). It provides a flexible framework to protect against disruptions, reduce risks, and ensure recovery of critical operations, using a risk-based PDCA (Plan-Do-Check-Act) cycle aligned with Annex SL for integration with other standards.
Key Components
- 10 clauses: scope, context, leadership, planning (including BIA and RA), support, operation, evaluation, improvement.
- No prescriptive controls; tailored to organizational context.
- Core principles: resilience, continual improvement, leadership commitment.
- Certification model: 3-year validity with annual surveillance audits.
Why Organizations Use It
- Builds resilience against cyberattacks, disasters, supply failures; minimizes downtime and losses.
- Ensures compliance with regulations like the EU NIS2 Directive.
- Enhances risk management, stakeholder trust, reputation, and competitive advantages.
- Reduces insurance costs, boosts procurement opportunities.
Implementation Overview
- Phased approach: gap analysis, BIA, documentation, training, testing, audits.
- Suits all sizes/sectors globally.
- Two-stage certification (6-8 weeks post-readiness); tools accelerate process.
(178 words)
Key Differences
| Aspect | EN 1090 | ISO 22301 |
|---|---|---|
| Scope | Execution and conformity of steel/aluminium structures | Business continuity management system resilience |
| Industry | Construction, fabrication (EU/EEA market) | All sectors worldwide, all organization sizes |
| Nature | Harmonized standard, mandatory CE marking (CPR) | Voluntary certification standard (PDCA framework) |
| Testing | FPC certification, NDT, surveillance audits by NB | BIA, exercises, internal/external audits, reviews |
| Penalties | Market exclusion, legal liability, no CE marking | No legal penalties, loss of certification/reputation |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about EN 1090 and ISO 22301
EN 1090 FAQ
ISO 22301 FAQ
You Might also be Interested in These Articles...
CIS Controls v8.1 Metrics That Matter: KPIs, KRIs, and Dashboards for Board-Ready Cyber Reporting
Quantify CIS Controls v8.1 success with KPIs, KRIs & dashboards. Learn what to measure, calculations, and executive presentations linking security to business r
CIS Controls v8.1 for Cloud & Kubernetes: A Practical Implementation Playbook (AWS/Azure/GCP + IaC)
Translate CIS Controls v8.1 to cloud-native: Kubernetes patterns for IAM, logging, vuln mgmt, hardening on AWS, Azure, GCP + IaC. Practical playbook for teams.
From Reactive Gatekeeper to Proactive Strategist: How Compliance Software Reshapes the Compliance Professional's Day
Discover how compliance software automates monitoring, delivers real-time insights, and transforms compliance pros from reactive gatekeepers to proactive strate
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Explore More Comparisons
See how EN 1090 and ISO 22301 compare against other standards