The organization is obligated to identify improvement opportunities and implement actions to achieve the intended outcomes of its Business Continuity Management System (BCMS). Upon identifying a nonconformity, it must be controlled and corrected. A subsequent evaluation is mandatory to investigate root causes and prevent recurrence, which includes assessing if similar issues exist. Implemented corrective actions must be proportionate to the nonconformity's impact, and their effectiveness must be verified. Crucially, the organization must maintain documented evidence of the nonconformity, all responsive actions, and their results, making changes to the BCMS as necessary.