Which phase in PDCA cycle establishes the operating framework for the BCMS?

In the ISO 22301 standard, the Plan-Do-Check-Act (PDCA) cycle is the operating principle for the Business Continuity Management System (BCMS). The "Plan" phase is responsible for establishing the foundation and operating framework. This includes defining the business continuity policy, objectives, targets, controls, processes, and procedures necessary to deliver results that align with the organization's overall policies. It encompasses understanding the organization's context, leadership commitment, and planning (Clauses 4, 5, and 6).

B. Do: The "Do" phase implements and operates the BCMS framework established in the Plan phase, rather than establishing it.
C. Check: The "Check" phase monitors and reviews performance against the established framework, rather than creating it.
D. Act: The "Act" phase focuses on maintaining and continually improving the BCMS, not establishing its initial framework.

1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements, Introduction, Section 0.3 (Plan-Do-Check-Act cycle).

2. ISO 22301:2019, Figure 1 – PDCA cycle applied to BCMS processes.