Which step Collates and Validates all resource requirements of the selected continuity solutions?

The step that collates (gathers and combines) and validates all resource requirements for selected continuity solutions is best described as Compile. This phase involves systematically identifying and documenting all necessary resources—such as personnel, information and communication technology (ICT), facilities, and supplier services—needed to implement the chosen business continuity strategies. This compilation process ensures a comprehensive and accurate understanding of the requirements before seeking management approval or budget allocation. This action directly corresponds to the requirements in ISO 22301 to "determine" and "identify" the resources needed for the selected solutions.

A. Check: This term relates to the performance evaluation phase (the 'Check' in Plan-Do-Check-Act) of the BCMS, which involves monitoring, auditing, and reviewing the system's effectiveness, not the initial resource identification.

C. Commit: This step occurs after the resource requirements have been compiled and validated. It involves securing management approval and formally allocating the necessary budget, personnel, and other resources.

D. Confirm: This action typically takes place after implementation, often through exercises and testing, to verify that the allocated resources are in place, accessible, and function as planned during a disruption.

1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements. Clause 8.3.4, "Resource requirements," mandates that "The organization shall: a) determine the resources needed... b) identify the resources required to implement the selected solutions." The process of determining and identifying from various sources is functionally equivalent to compiling a validated list.

2. Elliott, D., Swartz, E., & Herbane, B. (2010). Business continuity management: A crisis management approach. Routledge. In Chapter 6, "Business Continuity Strategies," the authors describe the process following strategy selection, which involves creating a detailed inventory or list of all required resources (people, premises, technology, information, supplies, stakeholders). This inventory creation is a compilation activity. (DOI: 10.4324/9780203864749, Section 6.5).

3. Gibb, F., & Buchanan, S. (2006). A framework for business continuity management. International Journal of Information Management, 26(2), 128-141. The BCM framework proposed in this peer-reviewed article includes a "Solution Design" phase. A key activity within this phase is the identification and specification of resource requirements for the chosen continuity strategies, which aligns directly with the concept of compiling requirements. (DOI: https://doi.org/10.1016/j.ijinfomgt.2005.11.008, Figure 1, p. 132).