The Act phase of PDCA cycle consists of improvement?

The Plan-Do-Check-Act (PDCA) cycle is the iterative methodology underpinning ISO 22301 for achieving continual improvement. The 'Act' phase is the final step where actions are taken based on the results of the 'Check' phase. Its explicit purpose is to implement corrective actions for any nonconformities and to identify and realize opportunities for enhancing the Business Continuity Management System's (BCMS) performance. Therefore, the 'Act' phase is fundamentally centered on improvement, making the statement true. This aligns directly with the requirements for continual improvement detailed in the standard.

B. False: This is incorrect because the primary function of the 'Act' phase within the PDCA model is to take actions that drive the continual improvement of the management system's performance.

1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements.

Section 0.3, "Plan-Do-Check-Act (PDCA) cycle": This section explicitly defines the four stages. For the 'Act' stage, it states: "Act: take actions to continually improve BCMS performance." This directly confirms that the phase consists of improvement.

Clause 10, "Improvement": This entire clause is dedicated to the activities that constitute the 'Act' phase, including "10.1 Nonconformity and corrective action" and "10.2 Continual improvement," which mandates that "The organization shall continually improve the suitability, adequacy and effectiveness of the BCMS."

2. Herbane, B. (2019). "Rethinking business continuity management: A review of the BCM literature and a framework for progress." Journal of Business Continuity & Emergency Planning, 12(4), 326-342.

This academic journal article discusses the evolution and core principles of BCM, frequently referencing the PDCA cycle from ISO 22301 as the mechanism for ensuring the BCMS is not static but evolves and improves over time, with the 'Act' phase being the driver of this improvement.

3. Järveläinen, J. (2013). "IT incidents and business impacts: A classification and the role of the business continuity plan." International Journal of Information Management, 33(5), 743-750. https://doi.org/10.1016/j.ijinfomgt.2013.05.003

In its discussion of BCM standards, the paper highlights the cyclical nature of the PDCA model, emphasizing that lessons learned from incidents (checked in the 'Check' phase) are used to drive improvements (in the 'Act' phase) to the business continuity plan and the overall system.