WhatsApp contact icon for Nathan ISO Consulting
WhatsApp contact icon for Nathan ISO Consulting

Wellington organisations plan around a scenario most cities treat as remote: that the building will be standing but unusable, and will stay that way for months.

That is the distinctive planning problem here. Seismic events in the region have repeatedly produced not collapse but assessment, cordons and closures, with tenants unable to access premises while engineers work through structural evaluations. A continuity plan built around systems recovery does not address it, because the systems are fine and the people cannot get to their desks.

Nathan ISO Consulting implements business continuity management systems for Wellington organisations across government agencies and Crown entities, financial services, health providers, professional services and lifeline utilities.

Looking for an ISO 22301 Consultant in Wellington?

Why ISO 22301 Matters for Wellington Organisations

Building availability is the first reason and the one imported plans handle worst. Recovery arrangements assuming relocation depend on alternative premises being available, which after a regional event they will not be, because every other organisation is seeking the same thing simultaneously. Arrangements that work are those established in advance and tested, or those that remove the dependency on a building altogether.

Continuity of government services supplies the second. Agencies delivering statutory functions cannot simply pause, and suppliers supporting those functions inherit expectations through contract. A supplier whose service underpins a payment, a registry or a public safety function is being asked, increasingly specifically, what happens if Wellington is disrupted.

The third reason is national dependency. Cook Strait is the link between the islands for freight and passengers, and the region sits at the northern end of it. Disruption here reaches supply chains well beyond the organisation experiencing it, which changes what obligations look like during an event.

Building Unavailability Is the Scenario to Design Around

After a significant regional event the sequence is predictable. Buildings are assessed rather than condemned. Cordons restrict access. Structural engineers are in short supply and prioritise by risk and occupancy. Tenants wait, sometimes for months, while insurers, owners and engineers work through a queue. During that period the organisation is intact, the staff are available, the systems are running and nobody can reach their workplace. Plans built around systems recovery do not address that at all. Plans built around distributed working, pre-arranged alternative arrangements and clear decision authority do.

Legal, Regulatory and Contractual Drivers in New Zealand

DriverWho It CapturesWhat It Requires
Civil defence emergency management dutiesLifeline utilitiesDuties to function to the fullest possible extent during and after an emergency and to participate in regional planning
Reserve Bank and FMA expectationsRegistered banks, licensed insurers, deposit takers and market participantsOperational resilience and outsourcing arrangements reaching material service providers
Agency contract requirementsSuppliers supporting government servicesEvidence of continuity capability, tested recovery objectives and provider oversight
Health and Safety at Work Act 2015Every businessDuties covering emergency preparedness and response, running in parallel with continuity work
Building Act seismic provisionsOwners and occupiers of buildingsAssessment and remediation obligations affecting whether premises remain occupiable
Critical infrastructure proposalsOperators of essential servicesConsultation ran during 2026 on strengthening resilience. Nothing is enacted
Privacy Act 2020Organisations holding personal informationEvaluating and reporting breaches, which your incident handling and continuity arrangements need to be capable of sustaining

New Zealand has no general business continuity statute. Obligations arrive by sector and, for most Wellington organisations, through agency and enterprise contracts.

Wellington Exposures Worth Planning Against

Five recur often enough here to warrant explicit treatment in any plan written for this region.

ExposureWhat It Looks Like in WellingtonPlanning Implication
Building unavailabilityPremises intact but inaccessible for weeks or months pending assessmentDesign for distributed operation rather than relocation, since alternative premises will be contested
Simultaneous demandEvery organisation seeking the same engineers, premises and contractors at oncePre-arrange what you can and assume anything unarranged will be unavailable
Cook Strait dependencyInter-island freight and passenger movement through a single constrained linkModel extended interruption to inter-island supply rather than delayed consignments
Transport corridor constraintLimited routes in and out of the region, vulnerable to slips and closureAssume staff cannot travel and that resupply is delayed
Concentrated tenancyMany organisations sharing buildings and precincts in a compact CBDCoordinate with landlords and co-tenants in advance, since response will be shared whether planned or not

Have an agency or regulator continuity requirement to meet?

Exercising for the Scenario That Actually Happens

Documents that have never been tested rest on guesses about human behaviour under pressure. The guess most likely to collapse in this city concerns location: plans quietly assume the organisation will have somewhere to be.

The scenarios that teach something are specific and awkward. The building is cordoned for an indefinite period with personal effects and paper records inside. Half the workforce cannot travel into the region. The decision-maker named in the plan is unreachable and nobody is sure who holds authority. A supplier essential to a statutory function is in the same cordon.

We write the scenario, facilitate the session and record every point where the plan stalled. The measure of a useful exercise is the length of the remediation list, which is why we design them to be uncomfortable rather than reassuring.

Our Wellington Delivery Approach

Step One – Scope and Build

The impact analysis runs in workshops rather than as a circulated form, because disagreements about what genuinely depends on what are where the useful information sits. Recovery targets are agreed with accountable people and tested against what is achievable when premises are unavailable and staff are dispersed. Dependency mapping follows, then strategies, plans and a command structure with decision authority stated clearly enough to survive the named person being uncontactable.

Step Two – Assessment

Assessor selection, terms and scheduling are our work, started early given the local pool. Before assessment the audit is complete, a genuine exercise has been run and documented, and the review is recorded. We attend both stages. Where agency or prudential expectations run alongside, records are arranged so one set answers each audience.

Step Three – Keeping It Alive

The annual exercise cycle, impact analysis refresh, internal audits and surveillance preparation stay with us. Building arrangements, tenancy and supplier relationships change frequently in this city, and a plan accurate eighteen months ago often is not.

The Documentation You Receive

  • Impact analysis. Worked through in sessions, identifying which activities carry the most weight, what sits underneath them and how consequences escalate.
  • Recovery objectives. Targets agreed with accountable owners and tested against a scenario where premises are unavailable and people are dispersed.
  • Building unavailability arrangements. What operates without premises, what requires them, and what has been pre-arranged rather than assumed.
  • Dependency mapping. Critical providers, inter-island and regional supply routes, and points where alternatives share your exposure.
  • Command structure. Decision authority defined so it survives the named individual being uncontactable, with communications for staff, clients and agencies.
  • Exercise programme. A credible scenario for your organisation, facilitated by us, with each failure captured and assigned.

Where Wellington ISO 22301 Projects Go Wrong

  • Relocation arrangements assuming alternative premises will be available, when every other organisation needs them simultaneously
  • Plans focused on systems recovery when the realistic scenario is intact systems and inaccessible buildings
  • Decision authority tied to named individuals with no succession, so the plan stalls when one person is unreachable
  • Paper records and personal effects inside the cordon, with no consideration of what that prevents
  • Analysis distributed as a form to complete, which returns a list on which nothing has been deprioritised
  • Tests pitched so everyone clears them, establishing that the document is legible and little else

Preparing for an upcoming audit?

Who Certifies You, and Where We Fit

We implement. An accredited body certifies.

Nathan ISO Consulting builds and implements management systems. We do not issue certificates, and no legitimate consultancy does. Your certificate comes from an independent certification body accredited by JAS-ANZ, the accreditation authority established jointly by the New Zealand and Australian governments. Accredited bodies operate under impartiality rules that prohibit them from certifying a system they helped build, which is precisely why the two roles are separate. Our job is to get you audit-ready, help you select the right accredited body, and stand alongside you through assessment.

Selecting the accredited body, negotiating the fee and fixing the dates are things we take on, matched to your scope, your sector and the audit approach that fits your operation. Our people are present for Stage 1 and Stage 2, and anything the assessor raises becomes our task rather than a list handed back when they leave. Do one check independently: confirm the JAS-ANZ register shows that body accredited for your scope. Unaccredited certificates are inexpensive and quick to obtain, and procurement teams turn them away often enough to make the check worth a minute.

Start With the Building

The opening question for a Wellington plan is what the organisation can still do if nobody can enter the premises for three months. Most organisations find that harder to answer than they expect.

Ready to start your ISO 22301 certification journey?

FAQ'S

No. We are an implementation consultancy. Certificates are issued by independent certification bodies accredited by JAS-ANZ. Accreditation rules prevent a body from certifying a system it helped build, so the consulting and certification roles must stay separate.

A JAS-ANZ accredited certification body of your choosing. We shortlist accredited bodies against your scope and sector, manage the quote process, and attend both audit stages with you. The certificate and the audit decision rest entirely with them.

Check the JAS-ANZ register and confirm the body is accredited for the specific standard and scope you need. Unaccredited certificates are widely available, inexpensive and routinely rejected by procurement teams, which means paying twice and starting over.

No consultancy honestly can, because the decision belongs to an independent auditor. What we can do is run your internal audit the way an external auditor would, close findings before assessment, and attend both stages so issues get resolved in the room.

Building unavailability rather than destruction. The realistic pattern is premises intact but inaccessible for an extended period pending assessment, with systems running and staff available but unable to reach their workplace.

Because after a regional event every organisation seeks them at once. Arrangements made in advance and tested may hold; arrangements assumed will not. Designing for distributed operation removes the dependency rather than competing for scarce space.

There is no general statute. Lifeline utilities carry civil defence duties, financial institutions face regulator expectations, and most Wellington organisations encounter the requirement through agency or enterprise contracts rather than legislation.

Inter-island freight and passenger movement runs through a single constrained link at the region’s edge. Extended interruption affects supply well beyond Wellington, which changes what your obligations look like to customers elsewhere.

Functioning to the fullest possible extent during and after an emergency, even at a reduced level, and participating in regional planning arrangements. That is a legal duty rather than a contractual expectation.

Once a year as a floor, with additional rounds after anything significant changes. How demanding the scenario is counts for more than how often you run it, so we build sessions that genuinely stress the decision-making rather than confirm it.

The two fit comfortably, built on matching clause architecture with shared ground on restoring technology services, meaning governance and audit effort is spent once. Suppliers fielding agency resilience questions here often carry both certificates.

Seldom necessary. What exists usually covers response reasonably while explaining priority choices poorly or not at all. We retain the functional parts, build the reasoning underneath, then check the targets survive a scenario with no accessible premises.

Sixteen to twenty-six weeks. Timing follows the analysis stage, which needs input from every corner of the organisation, and no assessor proceeds until a genuine exercise has been run and documented.

We handle all of it: writing the scenario, running the room, producing the findings. Groups testing plans they wrote themselves reliably steer around the thin spots, almost never deliberately, and that is why an outside facilitator earns the fee.

CONTACT
Reach out to us for any inquiries, collaborations,
or just to say hello!

Contact information for Nathan ISO Consulting

CLIENTELE
Our Valuable Client

WHEN NUMBERS MATTER
Empowering Insights into our Business Performance