1. International Organization for Standardization (ISO). (2019). ISO 22301:2019 Security and resilience — Business continuity management systems — Requirements.
Section 3.4: Defines a "management system" as a "set of interrelated or interacting elements of an organization to establish policies and objectives and processes to achieve those objectives." This definition directly supports the correct answer.
2. International Organization for Standardization (ISO). (2021). ISO/IEC Directives, Part 1, Consolidated ISO Supplement — Procedures specific to ISO.
Annex SL, Appendix 2: Provides the high-level structure, identical core text, and common terms and core definitions for all management system standards. The definition for "management system" (Clause 3.11) is consistent with the one in ISO 22301, reinforcing it as the standard term for a framework that turns strategy into action.
3. Asgary, A. (2021). Business Continuity and Disaster Recovery Management. York University.
Module 1: Introduction to BCM: Course materials often explain that a Business Continuity Management System (BCMS) is a specific type of "management system" that provides a systematic approach for organizations to plan, implement, and improve their business continuity capabilities, aligning with the organization's overall strategic objectives.