to business operations those threats, ifrealized, might cause, and which provides a framework for building organizational resilience with the capability of an effective response that safeguards the interests of its key stakeholders, reputation, brand and value-creating activities. ISO 22301:2012(en) Societal security-Business continuity management systems-Requirements [5] The Business Continuity Institute defines a BCM lifecycle as one that improves the overall resilience of the organization using the following good practices: A culture of embedding business continuity should be at the core of the practice A cycle of analysis, design, and implementation should form a continuous loop around business continuity An outer cycle of policy and program management should be used to control and determine the overall BCM lifecycle The British Standards Institution defines its business continuity management code of practice (BS 25999-1:2006) to cover the following aspects of business continuity: Scope Policy Identifying critical business functions Developing and managing a business specific continuity plan Monitoring and maintaining performance Embedding a culture of business continuity awareness in your organization. CHAPTER 5 NETWORK ROADMAP EVOLUTION A business continuity management system (BCMS), a system for managing business continuity, would thus ensure that business continuity is defined and managed effectively in accordance with the context and needs of the organization. Let's investigate the requirements for implementing such a system. Requirements for Business Continuity Management System The ISO 22301 standards define the BCMS framework in conjunction with the well-known quality control loop of the PDCA cycle (also known as Deming cycle), which comprises the following four phases applied continuously: Plan. Where one establishes the objectives and processes necessary for achieving the goals, and hence formulates a plan. Do. Where the steps in accordance to the plan are executed. Check. Where the results are actu