Business Continuity Management (BCM) is a holistic management process that identifies potential

threats to an organization and the impacts to business operations that those threats, if realized,

might cause, and which provides a framework for building organizational resilience with the

capability for an effective response that safeguards the interests of its key stakeholders, reputation,

brand and value-creating activities1. One of the main objectives of BCM is to prepare the entire

organization in advance of any major incident, so that it can respond and recover effectively and

efficiently. This is achieved by implementing a Business Continuity Management System (BCMS),

which is a set of policies, processes, procedures, roles, responsibilities, resources, and plans that

enable an organization to manage business continuity2.

According to ISO 22301, the international standard for BCMS, one of the benefits of implementing a

BCMS is that it helps an organization to establish a culture of good business practice, which is an

initiative that helps in preparing the entire organization in advance of any major incident3. Good

business practice means that an organization follows the principles of business continuity, such as

customer focus, leadership, engagement of people, process approach, improvement, evidence-

based decision making, and relationship management. By adopting these principles, an organization

can enhance its resilience, reduce its risks, improve its performance, and increase its customer

satisfaction.

The other options are not correct because they are not initiatives of BCM that help in preparing the

entire organization in advance of any major incident. Leadership is a principle of business continuity,

but it is not an initiative by itself. It refers to the role of top management in establishing the BCMS,

providing direction and support, and ensuring its effectiveness. Governance is a function of the

organization that ensures that the BCMS is aligned with the strategic objectives, complies with the

legal and regulatory requirements, and meets the expectations of the interested parties. Long range

focus is a characteristic of a resilient organization, but it is not an initiative of BCM. It means that an

organization anticipates and adapts to the changing environment, and plans for the future.

Reference: 1: ISO 22301:2019, Security and resilience — Business continuity management systems —

Requirements, 3.4 2: ISO 22301:2019, Security and resilience — Business continuity management

systems — Requirements, 3.5 3: ISO 22301:2019, Security and resilience — Business continuity

management systems — Requirements, Introduction : ISO 22301:2019, Security and resilience —

Business continuity management systems — Requirements, 0.2 : ISO 22301 Auditing eBook, Chapter

2.2.2 : ISO 22301 Auditing eBook, Chapter 2.1.1