Security and resilience — Business continuity management systems — Guidelines for people aspects of business continuity