establish and review the business continuity management framework and strategies