ISO 41017:2024

Overview

ISO 41017:2024 - Facility management - Guidance on emergency preparedness and management of an epidemic provides practical, organization-level guidance to plan for, mitigate and manage the risks and impacts of an epidemic on facility-related health, safety and well‑being. Applicable to organizations that are fully or partially operating, resuming operations, or new to operating, the standard helps integrate epidemic preparedness into facility management, risk management and business continuity frameworks.

Key topics and technical requirements

ISO 41017:2024 structures epidemic preparedness around familiar management-system concepts and addresses technical topics including:

• Context and impact assessment
  • Understanding operational, employee and stakeholder impacts of an epidemic.
• Leadership and governance
  • Leadership commitment, policy, roles, responsibilities and emergency management principles.
• Planning
  • Risk identification, emergency preparedness for an epidemic, ERP (Emergency Response Plan) considerations and escalation procedures.
• Operational controls
  • Situational monitoring, incident detection, alerting and implementation of response actions.
• Support and resources
  • Requirements for people, materials, finance, information, facility aspects and mechanisms to obtain resources.
• Communication
  • Internal and external communications during alerts, response and recovery.
• Exercises, monitoring and evaluation
  • Exercise programmes, monitoring, measurement, reviews of preparedness, response and recovery.
• Improvement
  • Handling nonconformities, corrective action, continual improvement and action plans for lessons learned.
• Practical annex
  • Informative example actions (e.g., Annex A on office facility controls) to help translate guidance into operational measures.

The document does not replace ISO 31000:2018 (risk management) but complements it by focusing on facility-specific epidemic assessment and controls.

Practical applications and who should use it

ISO 41017 is designed for:

• Facility managers and FM teams integrating epidemic risk into everyday operations.
• Emergency planners, business continuity managers and risk officers aligning ERPs with facility services.
• HR, occupational health & safety, procurement and building-services teams responsible for people, materials and infrastructure continuity.
• Property owners, facility service providers, campus operators and organisations preparing to resume operations after an outbreak.

Practical uses include developing or updating an Epidemic Emergency Response Plan (ERP), setting up monitoring and alerting protocols, defining resource and communication strategies, running epidemic exercises, and documenting lessons learned for continual improvement.

Related standards

• ISO 31000:2018 - Risk management (framework and processes)
• ISO 41001 - Facility management systems (requirements/guidance)
• ISO 22301 - Business continuity management
• ISO 45001 - Occupational health and safety

Keywords: ISO 41017:2024, facility management, epidemic preparedness, emergency response plan, business continuity, risk management, situational monitoring, facility-related health and safety.