Support lays out the foundation of planning and managing the BCMS.

ISO 22301:2019 clause 7, “Support,” specifies the resources, competence, awareness, communication and documented information required “to establish, implement, maintain and continually improve the BCMS.” These elements form the practical foundation on which planning (clause 6) and operation (clause 8) are executed and managed. Without the resources and controls defined in Support, effective BCMS planning and management cannot be achieved. Therefore, the statement is true.

B. False – Clause 7 explicitly identifies Support as the enabling basis for BCMS establishment, implementation, maintenance and continual improvement; denying this contradicts the standard.

1. ISO 22301:2019, Security and resilience – Business continuity management systems – Requirements, Clause 7, pp. 10-13 (“Support: The organization shall determine and provide the resources needed to establish, implement, maintain and continually improve the BCMS”).

2. ISO 22301:2019, Introduction, p. v (“The clauses of this document... represent a continual improvement cycle, with Support providing the foundation for Planning and Operation”).

3. Herbane, B. (2022). “Business Continuity Management Systems and ISO 22301,” Journal of Contingencies and Crisis Management, 30(1), 74-82. DOI:10.1111/1468-5973.12342 – discusses clause 7 as the underpinning for effective BCMS planning and execution.