Fundamental Principles and Concepts of a BCMS
What a BCMS is
A business continuity management system (BCMS) is a management system-plan-do-check-act in structure-whose subject matter is continuity. ISO 22301 follows the harmonized management-system clause structure (context, leadership, planning, support, operation, performance evaluation, improvement), so candidates must be able to separate management-system requirements from continuity-technique requirements. A frequent trap is treating the standard as a template for a plan; it is a system for governing continuity capability.
Core vocabulary
Know the distinctions precisely: disruption (event interrupting services), incident (disruption being managed), crisis (situation requiring strategic decisions), business impact analysis (BIA) (prioritization and recovery objectives), risk assessment (likelihood and consequence of disruption), maximum acceptable outage / MTPD (the point of unacceptable harm), RTO (target time to resume), and MBCO (minimum level of service acceptable). Questions love swapping RTO and MTPD: MTPD is set by the impact of loss, RTO is chosen to be shorter than MTPD. Another trap: treating BIA and risk assessment as alternatives-both are required and answer different questions.
Principles
Continuity rests on: prioritization by impact, not by convenience; documented information as evidence; leadership accountability (top management cannot delegate ownership); exercising to prove capability, not to tick a box; and continual improvement embedded in the cycle. The "all-hazards" principle means planning for consequences rather than a catalogue of named threats.
Worked rule of thumb
If a process has an MTPD of 24 hours, an RTO of 12 hours is defensible only if resources can actually deliver it; otherwise either the MTPD analysis or the resourcing is wrong. Always test RTO against MTPD and against demonstrated capability.
Common traps
Confusing BCMS scope with organizational scope; assuming certification proves continuity; and believing a plan alone is a BCMS.