The statement is correct. According to the ISO 22301:2019 standard, top management's leadership and commitment are fundamental to the success of a Business Continuity Management System (BCMS). This commitment must be active and visible ("outgoing"). Actions such as establishing the BC policy, communicating the importance of business continuity, ensuring resource availability, and promoting continual improvement are direct responsibilities of leadership. These actions set the organizational tone and are essential for embedding business continuity principles into the corporate culture, ensuring that it is understood, valued, and practiced throughout the organization.

B. False: This is incorrect. The ISO 22301 standard explicitly requires top management to demonstrate leadership and commitment. Without this, a BCMS is likely to fail, and a positive business continuity culture cannot be effectively established or sustained.

1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements.

Section 5.1, "Leadership and commitment," states: "Top management shall demonstrate leadership and commitment with respect to the business continuity management system by: ... d) communicating the importance of effective business continuity management and of conforming to the BCMS requirements; ... f) directing and supporting persons to contribute to the effectiveness of the BCMS; g) promoting continual improvement." These actions directly foster and embed an organizational culture.

2. ISO 22313:2020, Security and resilience — Business continuity management systems — Guidance on the use of ISO 22301.

Section 5.1, "Leadership and commitment," provides guidance, explaining that top management's visible involvement is critical for creating a culture where business continuity is considered an integral part of how the organization operates. It clarifies that this commitment drives the integration of the BCMS into the organization's culture.

3. Bajgoric, N. (2014). Business Continuity Management: A Systemic View. International Journal of Information Systems and Social Change (IJISSC), 5(3), 1-17.

Page 8, Section "Critical Success Factors for BCM," identifies "Top management support" as a primary critical success factor. The publication emphasizes that this support is crucial for providing vision, allocating resources, and overcoming resistance, which are all necessary components for embedding a BCM culture. DOI: 10.4018/ijissc.2014070101