These activities form part of a framework which represents a cycle of continuous improvement of the BCMS based on changes in the business and operating environment, audit recommendations, and test results for risks, gaps, or vulnerabilities.