Explanation
Evaluation is the process of assessing the performance of an organization, a system, a process, or an activity against a set of criteria, standards, or objectives. Evaluation can be used to identify strengths, weaknesses, opportunities, and threats, as well as to measure the effectiveness, efficiency, and impact of the organization's activities. Evaluation can also be used to compare the performance of different organizations, systems, processes, or activities, and to identify and share best practices and lessons learned. Evaluation is one of the key elements of the Plan-Do-Check-Act (PDCA) cycle, which is the basis of the ISO 22301 standard for business continuity management systems (BCMS). Evaluation is related to performance evaluation, audit, and benchmarking study, as these are some of the methods or tools that can be used to conduct evaluation. References: ISO 22301 Auditing eBook, Chapter 2: Introduction to Business Continuity Management Systems (BCMS), Section 2.3: The PDCA Cycle, Page 17; ISO 22301 Auditing eBook, Chapter
5: Audit Principles, Section 5.1: Introduction, Page 65; ISO 22301 Auditing eBook, Chapter 6: Audit Program, Section 6.3: Audit Program Objectives, Page 75; ISO 22301 Auditing eBook, Chapter 7: Audit Activities, Section 7.1: Introduction, Page 85; ISO 22301 Auditing eBook, Chapter 8: Audit Competence and Evaluation of Auditors, Section 8.1: Introduction, Page 105.

Explanation
Corporate defences are the measures and mechanisms that an organization implements to protect itself from internal and external threats and disruptions. Corporate defences include guidelines, procedures, and physical control systems that aim to prevent, detect, respond to, and recover from incidents that may affect the organization's assets, operations, performance, reputation, or continuity. Corporate defences are an essential component of business continuity management, as they help to ensure the organization's resilience and sustainability in the face of uncertainty and volatility. Corporate defences should be aligned with the organization's objectives, values, and culture, as well as the requirements and expectations of its stakeholders. Corporate defences should also be based on a systematic assessment of the organization's risks and opportunities, as well as the best practices and standards for business continuity, such as ISO 223011.
References:
ISO 22301:2019 - Security and resilience - Business continuity management systems - Requirements1 ISO 22301 Auditing eBook, Chapter 2: Business Continuity Concepts and Principles, Section 2.5:
Corporate Defences2

Explanation
A competitor is an organization or individual that operates in the same market as another organization or individual and offers similar products or services that are in direct or indirect competition with each other.
Competitors are interested parties that can affect or be affected by the organization's business continuity objectives, strategies, and performance. Competitors can also pose threats or opportunities for the organization's business continuity management system (BCMS). References: ISO 22301 Auditing eBook, page 18; ISO 22301:2019 standard, clause 3.3.1

Explanation
A documentary review is a type of review that involves examining documents, records, or other forms of evidence related to the audit criteria and objectives. It can often be used as a secondary method to support other forms of information collection methods, such as interviews, observations, or sampling. A documentary review can help to verify the existence, implementation, and effectiveness of the audited processes, activities, or controls. It can also provide useful information about the context, scope, and objectives of the audit, as well as the roles and responsibilities of the auditees and other relevant parties. References: ISO 22301 Auditing eBook, page 611; ISO 19011:2018, clause 6.3.22