ASIS SPC.1-2009 - Organizational Resilience Standard
4.1 and 4.2: General requirements and OR management policy – ASIS SPC.1-2009 - Organizational Resilience Standard
ASIS SPC.1-2009 - Organizational Resilience Standard 4.1: 4.1 An OR management system established, documented, implemented, maintained and continually improved
The organization must set up, write down, put into operation, keep and keep improving a management system for organizational resilience, covering security, preparedness and continuity, that conforms to the Standard, and must decide how it will satisfy each requirement.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.