, intermediaries shall perform as follows: (1) establish business continuity management policy (Business Continuity Management: BCM) which is approved by senior management and boards of directors; (2) establish