The Do phase in the PDCA cycle consists of operation, which means implementing and operating the
business continuity policy, controls, processes, and procedures that have been planned in the
previous phase. The Do phase also involves establishing the necessary resources, competencies,
awareness, communication, and documentation to support the effective operation of the business
continuity management system (BCMS). The Do phase aims to ensure that the organization is
prepared to respond to and recover from disruptive incidents in a timely and effective
manner. Reference: ISO 22301 Auditing eBook, pages 9, 10, 11, 22, 23, and 24.
