Explanation
According to ISO 22301, a business continuity management system (BCMS) is a part of the organization's overall management system that establishes, implements, operates, monitors, reviews, maintains, and improves business continuity. A management system is a set of interrelated or interacting elements of an organization that establishes policies and objectives and enables the achievement of those objectives. A management system can address one or more disciplines, such as quality, environment, information security, or business continuity. Therefore, a BCMS is not limited to the IT management system, nor is it always managed by an external service provider. A BCMS is integrated with the organization's strategic direction, culture, values, and processes, and it involves the participation and commitment of all levels and functions of the organization. References: ISO 22301 Auditing eBook, page 9 1; ISO 22301:2019, clause 3.4 2

Explanation
The knowledge of BCM and its methodology is not related to technical expertise, but to domain expertise.
Technical expertise refers to the knowledge and skills related to the audit process, such as audit principles, procedures, techniques, and tools. Domain expertise refers to the knowledge and skills related to the specific field of the audit, such as BCM concepts, terms, definitions, requirements, and best practices. References: ISO
22301 Auditing eBook, page 11; ISO 19011:2018, clause 7.2.2

Explanation
The act step in the PDCA cycle validates improvements by taking actions to address any gaps, nonconformities, or opportunities for improvement identified in the check step. The act step also involves reviewing the effectiveness of the actions taken and determining whether further improvement is possible or necessary. The act step closes the PDCA cycle and leads to a new plan step for the next cycle of continual improvement. The act step is one of the key requirements of ISO 22301, as it demonstrates theorganization's commitment to enhance its business continuity capability and performance. References: ISO 22301 Auditing eBook, page 10 1; ISO 22301:2019, clause 0.3 2